cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
292
Views
0
Helpful
2
Replies

Can you deploy FTDv in AWS using Site-to-Site IPSEC tunnels wo/ NAT-T?

red2play
Level 1
Level 1

We have a customer who uses a basic VPN service and it doesn't support NAT-T.  Been trying for days to get it to work but it won't work.  We contacted the Vendor and they stated that they don't support NAT-T IPSEC tunnels.  IS there a way to deploy an AWS FTDv solution with a direct public IP or without NAT-T specifically?

2 Replies 2

Pavan Gundu
Cisco Employee
Cisco Employee

Do you see in the debugs that NAT-T is detected and it is trying to switch to port 4500?

the NAT-T is oprtional not manadotry, 
so VPN S2S can work without any issue if both Peer use public IP. and not behind any NATing device.