tangerine0072000
Technical User
Hi,
I'm trying to hide my internal subnet in a vpn config to a remote destination, but I'm ok with VPN config's, but not sure if my natting is correct. I have the following....
internal subnet: 192.168.7.0 255.255.255.0
the subnet I would like to hide behind: 192.168.51.0 255.255.255.0
remote subnet: 192.168.243.0 255.255.255.252
access-list outside_cryptomap_50 permit ip 192.168.7.0 255.255.255.0 192.168.243.0 255.255.255.252
access-list VPN_NAT permit ip 192.168.51.0 255.255.255.0 192.168.243.0 255.255.255.252
global (outside) 2 192.168.51.0 255.255.255.0
nat (inside) 2 access-list VPN_NAT 0 0
isakmp key ******** address 1.1.1.1 netmask 255.255.255.255 no-xauth no-config-mode
crypto map outside_map 50 ipsec-isakmp
crypto map outside_map 50 match address outside_cryptomap_50
crypto map outside_map 50 set peer 1.1.1.1
crypto map outside_map 50 set transform-set ESP-3DES-SHA
I'm trying to hide my internal subnet in a vpn config to a remote destination, but I'm ok with VPN config's, but not sure if my natting is correct. I have the following....
internal subnet: 192.168.7.0 255.255.255.0
the subnet I would like to hide behind: 192.168.51.0 255.255.255.0
remote subnet: 192.168.243.0 255.255.255.252
access-list outside_cryptomap_50 permit ip 192.168.7.0 255.255.255.0 192.168.243.0 255.255.255.252
access-list VPN_NAT permit ip 192.168.51.0 255.255.255.0 192.168.243.0 255.255.255.252
global (outside) 2 192.168.51.0 255.255.255.0
nat (inside) 2 access-list VPN_NAT 0 0
isakmp key ******** address 1.1.1.1 netmask 255.255.255.255 no-xauth no-config-mode
crypto map outside_map 50 ipsec-isakmp
crypto map outside_map 50 match address outside_cryptomap_50
crypto map outside_map 50 set peer 1.1.1.1
crypto map outside_map 50 set transform-set ESP-3DES-SHA