Ip nat inside source route-map NAT interface FastEthernet0/0 overload Ip access-list extended IPSEC_VPN_INSERT_ROUTE Here is the relevant configuration, it is very straight forward anyway: interface Loopback1 I know route-maps can be added in static NAT host to host mapping, but it's not available for ip nat inside source static network command. Is there any possibility to make some sort of conditional static network mapping based on source IP or 元 interface, or maybe EasyVPN has some built-in solution for that? Generic static NAT statement works, but it also ruins PAT/overload for internet (static mapping translation is used for internet heading traffic as well). We can't change LAN addressing so I'm trying to implement some sort of static NAT 1:1 network mapping to send fake network route to users and then NAT their incoming traffic to real one. My concern is, that their local network 192.168.1.0/24 may overlap with a lot of remote users' consumer network devices, as they're often configured with the very same subnet for their LAN segments as well. I know this software is unsupported for quite some time already, but it still works fine and is the only option at this moment. They have Cisco 2801(SEC/K9) and I've configured split tunnel with Cisco VPN Client software for remote users.
#EASYVPN OVERLAPPING SUBNETS HOW TO#
During COVID-19 VPN madness, I'm stuck with EasyVPN for one customer and can't figure out how to solve overlapping subnet problem.
0 kommentar(er)
