PAT/NAT over IPSec

[rpaolet]

Hello,

i'd like to make a site-to-site with PIX 515 and IOS 6.3(3) but i'd like to use the PAT for my private network.

I use the acl for mark the traffic into the tunnel, but the other site the traffic match the acl but doesn't come into the tunnel.

Can anyone help me??

Regards

Roberto

[slaterc]

You may need to configure one end of the tunnel as an EzVPN server and the other end as and EzVPN client.

I think this is true because I know that the Cisco VPN client behind PAT can connect to a PIX. But in this scenario you need to do:

isakmp nat-traversal

on the PIX.