IP in IP and NAT

[Nav Sangha]

Hi

I am just wondering if this is possible, i have a setup as below.

R1 Public IP ---internet------Public IP ASA Private IP-----------Private IP R2

This Cisco ASA has a 1 to 1 NAT setup to translate R2 Private IP to a Public IP in both directions.

Would it be possible to setup a IP in IP tunnel between R1 and R2 or will this not work?

Thanks

[Flavio Miranda]

Hello,

 Could you reformulate you question ?

"Would it be possible to setup a IP in IP tunnel between R1 and R2 or will this not work?"

What do you mean by IP in IP ?

[Nav Sangha]

Hi, similar tunnel to GRE but IP in IP, aka IP in IP encapsulation

[Flavio Miranda]

Got it. 

With One-to-One NAT I believe is possible. 

Very good explanation Here

[Nav Sangha]

Hi

Any chance of doing this without ipsec, to get the throughput that IPIP encapsulation gives with my current router i would need to buy a bigger router if i had to use ipsec.

[Flavio Miranda]

I think so. That was just one possible scenario. If R1 can reach R2 and the NAT in the meddle is One-to-one, I don't see why not.

 I'll try that on lab later on.

[Nav Sangha]

Thanks for that, other way around i assume is to put the ASA into transparent mode and forget the NAT, never setup an ASA in this way though.