Ikev2 site to site tunnel between Cisco iosxe router and azure fw

[MriduD]

Hi everyone,

I am trying to create ikev2 site to site tunnel between our cisco iosxe router and client's azure firewall. And nat over vpn should be configured on azure fw. 

I would really appreciate any guidance or help(with sample configuration) if anyone has set it up in the past. Please help.

[MHM Cisco World]

Nat over ipsec vpn! Can you elaborate more.

[MriduD]

Hello sir...say we need to establish s2s between 10.0.0.0/24 and 192.168.1.0/24 subnets. But, 10.0.0.0/24 has to be nat'ed to 172.16.0.0/24 on azure. This is done to avoid any ip address conflicts on Cisco side since we have multiple tunnels to various clients 

[MHM Cisco World]

NATing done in ISR/ASR or Azure ? 

[MriduD]

We advise our clients to do it at their end. In this case, nat has to be done on azure.

[MriduD]

If you could help, sir. I would be highly grateful

[MriduD · Accepted solution]

@Rajesh11735 please do follow.

[MriduD]

I was about to figure it out. Ty everyone for your inputs!!