c837 s2s-VPN & static NAT

[b_learoyd]

Need to do s2s VPN between 506e and c837 but also do static NAT on a single device at the c837 end to enable it to function as ftp server visible to the Internet.Using:-ip nat inside source list 195 interface Dialer1 overload and

ip nat inside source static <192.168.x.x> <external ip> and the usual acl's to control NAT and Crypto.

506E 6.3(3) 3.0(1)

c837-k9o3y6-mz.122-13.ZH.bin

Can anyone point me at an example ? I suspect the problem is due to order of processing NAT/Crypto/routing.

[didyap]

Here is document on NAT configurations in Cisco 800 series.

http://www.cisco.com/en/US/products/hw/routers/ps380/products_configuration_guide_chapter09186a008014db78.html#91647