ASA 5505 L2L VPN with NAT 1

[indy1979]

Ok, need to set up a site to site vpn with a company that is requiring that my local server be NATed inside the tunnel.

I have the tunnel configured (just waiting on PSK from remote company) with my local subnet as source and his subnet as destination.

How do I create a NAT rule that will translate only the data destined for the VPN, coming from my .5 server, to 10.0.202.112 and push it through the VPN? Everything coming from the server should be treated as normal traffic.

Thanks for the help!!

Sam

 

[brianinms]

access-list vpnnat permit ip host x.x.x.5 y.y.y.y y.y.y.y

static (inside,outside) 10.0.202.112 access-list vpnnat

 

[indy1979]

Thanks!

It worked a treat once I realized that NAT occurs first so the interesting traffic needs to reflect the NATed address.