Hello Troy,
I beleive you need to add a 'route-map' statement to the static NAT to exclude VPN traffic. Since you have a L2L VPN, you should also have VPN traffic excluded from your general NAT overload, if you use one. Your overload NAT statement may look like:
ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0/0 overload
If you have a route-map there, you can use a static NAT with the same route-map, like:
ip nat inside source static tcp (internal host) 443 (external IP) 443 route-map SDM_RMAP_1 extendable
If you inspect the route-map carefully (show run | s route-map), you will see inside an access-list that excludes L2L VPN traffic from the NAT with deny statements and allows NAT for traffic with permit statements. So, we just used this route-map in the static NAT statement to disable the NAT rule for the VPN traffic and keep it just for External->LAN traffic.
If you will need any help with configuration, you can send me a show tech output, so I can give you specific configuration commands for your UC500.
Regards,
Ivan Bondar
