Folx,

Ther serial port of my router is connected to PVT network and ethernet is
connected to Internet,throught which i am going to establish VPN(Ipsec).

My question are...
1)I am not running nat on my router,do i still need to add the following on
my router...

access-list 130 deny ip 10.65.0.0 0.0.255.255 172.16.2.11 0.0.0.0
access-list 130 permit ip 10.65.0.0 0.0.255.255 any

route-map nonat permit 10
  match ip address 130

ip nat pool branch   netmask 
ip nat inside source route-map nonat pool branch overload

2)My PVT network mask is 252...so would my access_list mask would be  0.0.0.3

access_list permit ip 192.168.5.36 0.0.0.3 172.16.3.2 0.0.0.255

Cheers
Ramesh




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28806&t=28806
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to