IPSEC Hub with Spoke Behind NAT device

[Bonnie Mtengwa]

I would like to setup an IPSec VPN, i have a challenge on how to do it because the Spoke device is behind a NAT device and also it uses dynamic IP addresses

,

can anyone point me to the right article that can help me to do this, or can help by the required commands on the HUb and Spoke Routers

thanks

[Jennifer Halim]

If it's dynamic IP on the spoke, you can only create dynamic-to-static VPN tunnel, and the VPN tunnel can only be initiated from the dynamic/spoke end.

Here is a sample config for your reference:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00801dddbb.shtml

Hope that helps.