trying to build an ipsec vpn tunnel between one site to customer

[ronakpa]

                   on both side nat is happening to i am confuse about how to define acl for that. can one build this type of connection that have nat both sides.

[Javier Portuguez]

Hi Ronak,

If you have NAT, then you add the NATed IP to the crypto ACL.

Thanks.

Portu.

[ronakpa]

i have router and pix connected and i am doing nat on my router. how should i perform nat on router? i have 10.200.200.0 subnet for nat. and 10.124.90.250 actual device ip i need to ssh from cisco side. and 216.46.255.0/26 is thier nat subnet