VPN NAT question

[kareem.afifi]

Hello,

I'm using a Cisco Concentrator VPN 3030. I have an existing VPN tunnel where i'm making Static NAT entry's for a local IP subnet and only using the NAT'd address for the Local Address list.

The NAT subnet is a /29

Problem is I need to add 2 new Static entry's and i'm basically down to 1 useable IP. In this case can I use the network and Broadcast address if needed? I need to make a change with in the next 24 hours and right now expanding the subnet is just not an option. Was told that because we are NAT'ing over the VPN tunnel we could use the Broadcast NAT address for now.

Can someone validate this?

Thank you                

[jj27]

As long as you are not routing the subnet as a /29 across the tunnel and you are using the individual IP addresses across the tunnel then you should be able to use the network and broadcast addresses as valid IPs.  Once you try to start routing the subnet as a whole  is where you'd run into issues.

[kareem.afifi]

I'm not routing the /29 through my network. But through the tunnel I do have the network list setup as the following

10.1.1.0 0.0.0.7 as part of my network list. I have this on my local list and they have that on thier end as thier remote list.

The only thing i'm doing indivdually is the the Static NAT's. Sounds like I could have an issue with this?