Cisco ASA 5505 Configuration Manual page 1355

Chapter 64 General VPN Setup
Figure 64-3
b. In the Action Translated Packet area, configure these fields:
–
–
–
–
In the Options area, configure these fields:
c.
–
–
–
–
Click OK.
d.
Click Apply. Your rule should look like rule 1 in the
e.
page
CLI example:
nat source static Engineering-VPN Engineering-VPN destination static Sales-VPN
Sales-VPN
Click Send.
f.
When ASA is performing NAT, in order for two hosts in the same VPN pool to connect to each other, or
Step 3
for those hosts to reach the Internet through the VPN tunnel, you must enable the Enable traffic
between two or more hosts connected to the same interface option. To do this, in ASDM, select
Configuration > Device Setup > Interfaces. At the bottom of the Interface panel, check Enable traffic
between two or more hosts connected to the same interface and click Apply.
CLI example:
same-security-traffic permit inter-interface
OL-20339-01
Create Network Object for a VPN address pool
Source NAT Type: Static
Source Address: Original
Destination Address: Original
Service: Original
Check Enable rule.
Uncheck or leave empty the Translate DNS replies that match this rule.
Direction: Both
Description: Add a Description for this rule.
64-48.
Configuring AnyConnect (SSL) VPN Client Connections
Unified NAT table
Cisco ASA 5500 Series Configuration Guide using ASDM
in Figure 64-5 on
64-45