I'm trying to configure a VPN with a 1720 and an 806 both running NAT (non-overload). The current (grin) problem preventing the VPN from working is when I do a "show crypto ipsec sa" the "Remote Ident" is a private network address (which is correct),...

I'm configuring a VPN for the first time with a 1720 and an 806. Both routers are doing NAT (with an address pool). There is a router in between them, so both gateways are set to the 2 interfaces on the "middle" router. The VPN does not work. The SA'...