Site to Site VPN(VTI)

[harish.pal]

Hi all have S2S VPN connection and i am performing Nating 

10.0.0.0/16----- 47.73.223.250

by using access list 

Extended IP access list 100
    10 permit ip 10.0.0.0 0.0.255.255 145.230.12.0 0.0.0.255

And Overloaded to LoopBack1

interface Loopback1
 ip address 47.73.223.250 255.255.255.255
end

ip-10-0-0-156#show run | inc ip nat
 ip nat outside
 ip nat inside
ip nat inside source list 100 interface Loopback1 overload

interface GigabitEthernet1
 ip address dhcp
 ip nat inside
 negotiation auto
end

interface Tunnel1
 ip address 169.254.249.50 255.255.255.255
 ip nat outside
 ip tcp adjust-mss 1387
 tunnel source GigabitEthernet1
 tunnel mode ipsec ipv4
 tunnel destination 85.205.30.148
 tunnel protection ipsec profile ipsec-vpn-Vodafone-mgmtAWS-0
 ip virtual-reassembly
end

Nating is working properly but traffic after Nating to (47.73.223.250) is not entering to the tunnel interface and interface will go down

please advise and help ASAP

[mariano.alfonso]

Hi Harish,

Let me see If I get this correctly, so what you want is that the 10.0.0.0/16 traffic when it's going to 145.230.12/24 gets natted to 47.73.223.250??

Before the traffic tries to leave, can you see the tunnel is up?

Thanks,