PAT over site to site VPN tunnel

[carl_townshend]

Hi All

Just a quick sanity check, basically the requirement is that we NAT all our traffic to 1 ip address when going over the vpn tunnel.

The VPN is built on a natted source network of 192.168.1.0/27 , I have set a NAT rule to dynamically NAT all 10.0.0.0/16 traffic coming into the firewall to 192.168.1.1

So does the NAT happen before the crypto map, I cannot bring up the tunnel for some reason.

Any ideas why ?

cheers

[Angel_Inglese]

Hi there!

Yes, the NAT happens before the encryption, and you should have your Natted segments in the VPN,

so, if your LAN is 10.0.0.0/16 and it is Natting into a subnet 192.168.1.0/24 as a source, then you should add the 192.168.1.0/24 subnet to the crypto map and it should establish the tunnel,

regards,

**please, consider rating helpful or as a solution, thank you**

[Angel_Inglese]

please, consider adding more information such as log messages (erasing the critical information such as IP addresses or URL)

[carl_townshend]

Hi

Don't worry, all is working, issue was at the partner side

cheers