We have a Cisco ASA 5505 box. We are trying to connect to a stock exchange server through a VPN. I set up a site to site VPN from our network to the exchange. All traffic for the net goes through the VPN. This appears to be working correctly.

The next step is that I have to set up something so that traffic from our internal fixed IP address of appears to the server on the other end to come from a address. We only want this rule to apply when traffic is coming inside from bound for

Is this set up as a static NAT? Very new to this Cisco world.

  • To clarify, do you need the NAT rule to only translate when the source address is Or do you want to only allow to access the server? The former cannot be done with static NATing, and the latter can be done easily with an ACL.
    – Goodies
    Commented Jul 20, 2015 at 15:47

1 Answer 1


What you're asking for is called Policy NAT. You use an access list to define what traffic gets NATed. I don't have your configuration, so here is a sample of what you need to do.

ip access-list extended SE-VPN permit ip host
global (outside) 100
nat (inside) 100 access-list SE-VPN

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.