Internet Security Router User
’s Manual
Chapter 10. Configuring VPN
105
Refer to the section 10.3 Establish VPN Connection Using Automatic Keying to configure VPN policies on
ISR2 using automatic keying with the following addresses:
1.
Use 192.168.12.0/255.255.255.0 as Local Secure Group
2.
Use 192.168.11.0/255.255.255.0 as Remote Secure Group
Figure 10.13. Extranet Example
–VPN Policy Configuration on ISR2
Step 2: Configure Static NAT Pools
1.
Configure outgoing static NAT pool (static-NAT) for translating addresses in range 192.168.1.1-
192.168.1.254 to 192.168.12.1-192.168.12.254
Figure 10.14. Extranet Example
– Outgoing NAT Pool Configuration on ISR2