GRE for VPN using extendable NAT.

[huytuan]

Iam trying to configure VPN, I've got this:

ip nat inside source static tcp 192.168.100.8 1352 203.145.145.145 1352 extendable

ip nat inside source static tcp 192.168.100.8 1723 203.145.145.145 1723 extendable

ip nat inside source static tcp 192.168.100.8 47 203.145.145.145 47 extendable

ip nat inside source static tcp 192.168.100.8 isakmp 203.145.145.145 isakmp extendable

ip nat inside source static tcp 192.168.100.12 3389 203.145.145.145 3389 extendable

where do I put the GRE protocol in this configuration? Without GRE vpn does not work.

I don't want to do this:

ip nat inside source static 192.168.100.8 203.145.145.145

Is it a good idea to use interface Tunnel40843 for VPN than static NAT an external ip address, how do I use tunnel for VPN? What's the code?

[drolemc]

To see how GRE over IPSec can be configured, refer to 'Configuring IPSec/GRE with NAT' at http://www.cisco.com/warp/public/707/ipsecgrenat.html. The document additionally discusses a firewall configuration that you could skip unless you have a firewall in place too.