VPN NAT question

[burleyman]

I am looking for confirmation if this is possible or not.

I am being asked to configure an ASA 8.2 to NAT in the following way.

Local LAN - 10.30.1.0/24

Remote LAN - 172.31.255.128/25

Remote NAT - 172.31.17.0/24

I am being asked to set up NAT when going to the Remote LAN 172.31.255.128/25 to NAT the 10.30.1.0/24 to 172.31.17.0/24 but make it so the following happens......

NAT 10.30.1.10 to 172.31.17.10

NAT 10.30.1.200 to 172.31.17.200

so the last octet is preserved.

I do not think there is way to do this....or is there?

Here is what I have now...and it just picks a random IP to NAT to

global (outside) 11 172.31.17.1-172.31.17.254 netmask 255.255.255.0

nat (inside) 11 access-list CRYPTOMAP-11

access-list CRYPTOMAP-11 extended permit ip 10.30.1.0 255.255.255.0 172.31.255.128 255.255.255.128

Thanks,

Mike
 

[Marius Gunnerud]

You can't do what you want with one NAT statement.  You would need to create a seperate policy NAT statement for each translation and to be perfectly honost that would be more of a hastle than what it is worth.

--

Please remember to select a correct answer and rate helpful posts

[burleyman]

That is what I thought but I wanted to confirm I was not missing something.

Thanks,

Mike