cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
221
Views
0
Helpful
3
Replies

Site to Site VPN

patcbr600
Beginner
Beginner

Hello all,

I am trying to create a site to site vpn with two cisco routers, the tunnel is working fine and i have connectivity beteewn the lan's. Now on one site want to make nat from the souce addr to the outside addr. Its is possible to do this , making nat from the src add to the outside addr before adding the traffic to the tunnel.

Many thanks

3 Replies 3

royalblues
Advocate
Advocate

Yes its possible

When you have both NAT and crypto map applied on the interface, the order of operation is NAT first and then encrption. Have a look at the below link

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml

HTH

Narayan

Hi,

But is possible to make the nat to the ip address of the outside interface ?

Many thanks

Yes possible

have a look at the attached configs

Topology R0->R1->R2->R3

Crypto between R1 and R2 and R1 does a interface NAT for the interesting traffic

HTH

Narayan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: