NAT_T & Identity NAT

[Mahmoud Abd El-Wahed]

hi,

i just wanna know when am implementing an IPsec site-to-site VPN between two ASA

when i use NAT_T and when to use Identity NAT

my information

says that when there is a nat device between them use NAT_T

and if we dont use a nat device ( i am still dont know how to know if there is a nat device or not since the vpn go through the public internet!!)
we use identity nat

i just wanna hear a simple explaination

awaiting ur answers

[Marcin Latosiewicz · Accepted solution]

Hi Mahmoud,

Please have a look at section 3.2 or RFC 3947:

http://www.faqs.org/rfcs/rfc3947.html

NAT detection is described there.

HTH,

Marcin

[Mahmoud Abd El-Wahed]

thanks 4 ur help marcin