cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3579
Views
0
Helpful
4
Replies

AWS CSR1000V (NAT) - Automated Methods?

vault2002
Beginner
Beginner

Hello,

 

We are looking to use the CSR1000V for multiple clients using IPSEC tunnels into our AWS Environment so we can manage 1000's of client end devices. To support this we wanted to setup NAT but were unsure on the best method being used by most organisations today.

 

How are others doing NAT on these CSR1000V devices, is there any automated method that is suggested for NAT solutions with clients devices or is it more a manual process.

 

4 Replies 4

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend

When did you say Client devices? is this a site-to-site VPN or remote access VPN?

 

how about considering ASAv for remote access VPN solution? CSR Router most cases used for Point to Point VPN,(not that i can not be used, its bit manual task, ) 

 

ASAv you can use ASDM and manage things as easily as - when you doing from remote.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi,

 

The CSR's are for Point to Point VPN. (Essentially we will have 10-15 client Point to Point VPN's) and we will be supporting their client end devices via monitoring. Due to possible overlapping IP's we are investigating what the best possible NAT solution would be.

 

We do most of our automation with Ansible, works reasonably well, have had a play with the API module but looks like a lot of work to implement hopefully someone will write a terraform module for it in the future.

balaji.bandi
VIP Community Legend VIP Community Legend
VIP Community Legend

ok then CSR is good to go, you need to look for overlap IP with NAT or if possible VRF.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers