source nat problem

[I2007]

Hi.

NS25 is the box I'm refering to here...

I have a local lan ethernet1 10.20.30.1/24 binded to trust zone.

I have another local lan ethernet2 10.20.40.1/24 binded to office zone.

I want to source Nat from trust to office so that 10.20.30.x would be translated to 192.168.1.1 to the office zone.

The office zone has a tunnel interface for VPN bounded to it. So I have to source nat throught the cpn tunnel...

Does anyone know how to do this???

i2007

 

[Packet7]

Hello,

Yes, you can use NAT-DST to translate your VPN traffic. Is the VPN working? Let me know.

Rgds,

John

 

[I2007]

The vpn is up and running.

I've tried to set the new source subnet on the secondary ip on my trus interface and then make a dip in my tunnel interface. But I get an error saying the interface i'm using don't have that secondary IP adress at all, which is for me weird.

Sat2phant