How to ensure all VPN traffic will pass through router

[ynyng]

I recently upgraded from a Cisco 3900 series router to a Cisco ASR1k router. Since the upgrade, I have internal clients who claim they cannot connect to external VPNs. These internal clients are behind a NAT that routes a public IP address to a group of clients with private IP addresses.

How can I ensure that all VPN traffic is able to pass through the NAT?                   

[Javier Portuguez]

Hi there,

You could use the "show ip nat translations" to verify the current translations.

You could also use the "show crypto ipsec sa" to verify the SA´s for the specific tunnel.

Thanks.

Portu.

Rate any helpful posts

[ynyng]

Hi iportugu,

"sh ip nat trans" verifies the NAT translation for the user(s) in question.

The second command displays is an unrecognized command.

Thanks,

Kent