NAT to different subnet

[sgprice78]

I am using a Cisco 2600 as our perimeter router and want to add a NAT mapping to a VPN server that is on a subnet which is not directly connected to the router (it's on our internal network, and not in the DMZ). NAT is configured and working fine for all servers in the DMZ. The DMZ uses 10.1.2.0/24 and our internal network uses 10.1.1.0/24. The 2600 router knows the route to our internal network
(ip route 10.1.1.0 255.255.255.0 10.1.2.253). The servers in our DMZ can connect to the VPN server on our internal network just fine by using its private ip address, so I know that the router which connects the two networks is setup right.


Here is the command that I used -
ip nat inside source static 10.1.1.9 aaa.bbb.ccc.ddd