Router IPSec tunnel behind NAT network

[gonzalo.gil]

Hi Guys,

I am trying to do the following:

Static NAT

IOS Router ------ IPSec/GRE Tunnel ----- Pix ----IPSec Tunnel ----- Internet

Private Private Public

IP IP IP

The router behind the Pix firewall (Private addressing) establish an IPsec Tunnel to another router on the Internet using the same setup.

Do the routers support NAT transparency or will the IPsec(ESP) tunnel break?

Thanks in advanced.

Goncalo

[raymong]

You can set up IPSec through a firewall with NAT, but not with PAT (port address translation). Here's a link with a sample config:

http://www.cisco.com/warp/public/707/ipsecnat.html