ip nat command with site to site VPN - help needed

[ajlinggi]

I have a problem with an ip nat command...

Basically, I’ve configured (with the use of the SDM) a site to site VPN linking Croydon (HQ) and Charlton (branch office).

Charlton can access via the vpn the terminal server at Croydon no problems, but the problem is external clients need to access the terminal server over the internet.

When I add the command: ip nat inside source static tcp 192.168.200.5 3389 interface dialer0 3389 clients on the internet that aren’t connected to the vpn can access the terminal server fine.

But in adding the above command, it stops the vpn clients from accessing the terminal server. I need a way of making both internet clients and vpn clients able to access the terminal server.

Any ideas welcome!

Cheers,
Adrian.

 

[octavian10]

I am not 100% sure how to solve your problem but I can tell you that your issue can most likley be solved using routmaps. Setting up routing maps can get a little coplicated but with some reserch and and the help of some smart people on this site you will get it. Good Luck

"I hear and I forget. I see and I remember. I do and I understand."
- Confucius (551 BC - 479)

 

[ajlinggi]

Ok thanks for your help - if anyone wants to shed any light on route maps, that would be very helpful!

Thanks again,
Adrian.

 

[NettableWalker]

I would use this:

ip nat inside source static tcp 10.5.0.1 3389 xx.xx.xx.xx 3389 extendable

It sounds like it is a NAT problem

MCP,CCA,CCNA, Net+, Half CCNP...

 

[ajlinggi]

Thanks for the reply - I have tried adding the word 'extendable' onto the command but it still doesnt seem to fix the problem.

Do you have any other ideas?

Cheers,
Adrian.