IPSEC cisco c1111-8p

[emmanuelbista3]

Please i am quite new from implementing this, i need a little help on how to configure ipsec vpn on cisco c1111- 8p router for point to multipoint connection between head office and branches.

[MHM Cisco World · Accepted solution]

Configuring Router-to-Router Dynamic-to-Static IPSec with NAT - Cisco

[emmanuelbista3]

Hello sir thanks for your quick reply, please am a bit confused and i want
to understand this command

route-map nonat permit 10

match ip address 120

[MHM Cisco World]

if any IPsec behind NAT then you need nonat command, if not then you dont need it. 

[emmanuelbista3 · Accepted solution]

Understood sir thank you very much, i only was familiar with the nonat
pointing to the vpn access-list number or name but with you config i see a
slight difference thus why i asked.

Thank you very much for your feedback.