Hi,
Lets assume that 10.1.1.0/24 is the overlapping subnet on both ends of the tunnel.
nat (inside, outside) source static obj_10.1.1.0 obj_10.2.2.0 destination static obj_10.3.3.0 obj_10.1.1.0
This nat rule will translate 10.1.1.0/24 on site A to...
Hi,
When using DMVPN,
Transport mode would be preferred as it would not hide the IP header and even if it did it will replace the same at the other end of the tunnel, as peer IP's will be the same. Also using the tunnel mode in this case will be l...
Hi,
Nonce is sent before cryptographic algorithms are negotiated or PRF is decided ( In the IKE SA INIT). How is it made private if the responder does not know how the initiator protected it?
Please correct me if I am wrong.
Hi Ajay,
In the config
//policy nat translation //translates a source of //192.168.1.x/24 to //192.168.2.0/24 only when //the destination is 192.168.3.0/24 nat (inside,outside) source static obj-192.168.1.0 obj-192.168.2.0 destination static obj-19...
Hi Lei,
Transport mode would be preferred as it would not hide the ip headers and even if it did it will replace the same at the other end of the tunnel, as you are stating that peer ip's will be the same as well. Also using the tunnel mode in this...
