Customer had 192.168.x.x network overlapping
I needed to reach 192.168.0.82
I decided to NAT on customer side.
I sent traffic to 172.17.19.0 (This was in the VPN proxy ID)
172.17.19.0 (cust side) <> 172.16.100.0 (my side)
Now for NAT
Source Zone: VPN-ZONE (don't forget tunnel interface setup)
Destination zone: LAN
Source add: 172.16.100.0
Destination add: 172.17.19.0
Translated packet
Destination address translation
Translation type: Static IP
Translated address: N-192.168.0.0-24
Also note that mgmt interface IP config is not sync'd so you will need to get your IP's allowed under
device > setup > interfaces > management > permitted IP addresses
No comments:
Post a Comment