cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Ask the Expert- SD-WAN

1095
Views
0
Helpful
1
Replies
Highlighted
Beginner

IPSEC Hub with Spoke Behind NAT device

I would like to setup an IPSec VPN, i have a challenge on how to do it because the Spoke device is behind a NAT device and also it uses dynamic IP addresses

, dwaring111.jpg

can anyone point me to the right article that can help me to do this, or can help by the required commands on the HUb and Spoke Routers

thanks

Everyone's tags (4)
1 REPLY 1
Cisco Employee

IPSEC Hub with Spoke Behind NAT device

If it's dynamic IP on the spoke, you can only create dynamic-to-static VPN tunnel, and the VPN tunnel can only be initiated from the dynamic/spoke end.

Here is a sample config for your reference:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00801dddbb.shtml

Hope that helps.