DMVPN Behind NAT Device

[support]

How does the hub router figure out the IP address of the spoke? Does the spoke embed the address in the registration packets, or does it read it from the IP header?

I want to make sure that a spoke router sitting behind a NAT device will get the correct public IP address.

[Ivan Martinon]

When the spoke generates the registration request to the hub, this request will be NATed by the router/device infront of the spoke, so what comes to the hub is the NATed address of the spoke, I can't recall exactly but I believe you need to use Transport mode in order to nat the ip address within the IPSec header and to avoid issues.