<https://www.velocityreviews.com/threads/cisco-vpn3030-lan-to-lan-nat.38952/>
<http://schema.org/articleBody>
"Setup:\nClientA -- NetA -- VPN3030 ....@.... FW-1NG -- NetB -- Server\n\nDesc:\nClientA on NetA (10.0.0.0/8) needs access NetB Server (Host=172.16.0.1)\nVia Lan to Lan tunnel set up between Cisco VPN3030 and a Checkpoint FW-1 NG.\n\nProblem:\nNetB Server (Host=172.16.0.1) subnet is also routed elsewhere on NetA.\nAlso NetA subnet is routed locally on NetB\nI need &quot;one-sided&quot; NAT\n\nHere is what I have done:\n\n- Reserved an IP from local pool in VPN3030 IP=192.168.100.100\n- Create L2L with Peer for FW-1, PSK, Local network=192.168.100.100 /32\nRemote=172.16.0.1/32\n- Create L2L-NAT rule and enabled it:\nSource=10.0.0.0/8:Trans=192.168.100.100/32 Remote=172.16.0.1/32\n- Add Static route towards public interface for 192.168.100.100/32\n\n\nThis does not work. My guess is that the NAT rule is wrong, or that the\nterms source:trans - Remote means different\n\nthat I imagine.\n\nIs it true that the above NAT rule means that 10 gets its source translated\ninto 192.168 ?\nAnd how must I interpritate the Remote ?\n\nWhat I want to do, is to have ClientA on NetA (10.0.0.0/8) access the\nIP=192.168.100.100/32 and have this translated\n\ninto 172.16.0.1/32, and then put this into the tunnel towards FW1-NG\n\nHow can this be done in the VPN3030 ??\n\n\nPlease comment ...\n\nRegards\nMartin Bilgrav"
<https://www.velocityreviews.com/threads/cisco-vpn3030-lan-to-lan-nat.38952/>