DMVPN Hub behind NAT (Static PAT)

[net_support_101]

Hello everyone,

Can we place a DMVPN hub router behind ASA firewall and do NAT using static PAT (port forewarding) ?

We're running out of public IP and cannot do static NAT for the new DMVPN hub router. So I'd like to leverage PAT but not sure if it would work (again, for the DMVPN hub router)

Any help is greatly appreciated.

Cheers,

[Georg Pauwen]

Hello,

I would say this should work, if you PAT the three ports below:

UDP 4500
UDP 500
IP 50