OT: Remote Access VPN 8.4(2)+

Before I go the TAC route, I'm wondering if anyone has come across this one. I was running 8.4(1)11 and had fully migrated all NAT rules to working 8.3+ versions. After the upgrade to 8.4(3), I ran into issues with proxy-arp, which have been solved. Remote access VPNs with destinations across site to site tunnels is where I'm stuck. A twice nat (outside,outside) makes sense to me, but does not work. The previous method of no nat that translates into a twice nat is also failing.

Has anyone come across this type of config and can post a sanitized snippet for the twice nat?

For illustration, let's say my ip local pool is 10.1.1.0/24 and the fw has a site to site tunnel to 10.1.2.0/24. Assume that I have same-security permit intra-interface already configure as well. I'll post configs later.

Thanks!

-ryan

Sent from handheld

Blogs and organic groups at http://www.ccie.net
Received on Sun Mar 25 2012 - 19:10:21 ART