IPSEC Router VPN with NAT

[grfeldman]

I am building a router to router IPSEC VPN. The ether interface on one router will

have a private address which will be one-to-one statically translated on a firewall.

I will bind the crypto map to this NATd ether interface. The other router has a public

address on it ether interface. Will this work?

Thanks

[paqiu]

Hi,

It should be working fine. Make sure you have opened UDP 500, ESP and AH on the PIX for the translated address.

Best Regards,