09-23-2012 11:09 PM - edited 02-21-2020 06:21 PM
can some one please provide me with the configuration of the DMVPN hub-server when the hub-server is configured with nat???
i`ll be thankfull.............
Solved! Go to Solution.
09-24-2012 05:46 AM
Hi Mohammed,
I think you may want to check these links:
"Also added in Cisco IOS Releases 12.3(9a) and 12.3(11)T is the capability to have the hub DMVPN router behind static NAT. This was a change in the ISAKMP NAT-T support. For this functionality to be used, all the DMVPN spoke routers and hub routers must be upgraded, and IPsec must use transport mode.
For these NAT-Transparency Aware enhancements to work, you must use IPsec transport mode on the transform set. Also, even though NAT-Transparency (IKE and IPsec) can support two peers (IKE and IPsec) being translated to the same IP address (using the UDP ports to differentiate them), this functionality is not supported for DMVPN. All DMVPN spokes must have a unique IP address after they have been NAT translated. They can have the same IP address before they are NAT translated."
Static NAT & DMVPN Hub ---> Another similar post.
Hope it helps.
Thanks.
Portu
Message was edited by: Javier Portuguez
09-24-2012 05:46 AM
Hi Mohammed,
I think you may want to check these links:
"Also added in Cisco IOS Releases 12.3(9a) and 12.3(11)T is the capability to have the hub DMVPN router behind static NAT. This was a change in the ISAKMP NAT-T support. For this functionality to be used, all the DMVPN spoke routers and hub routers must be upgraded, and IPsec must use transport mode.
For these NAT-Transparency Aware enhancements to work, you must use IPsec transport mode on the transform set. Also, even though NAT-Transparency (IKE and IPsec) can support two peers (IKE and IPsec) being translated to the same IP address (using the UDP ports to differentiate them), this functionality is not supported for DMVPN. All DMVPN spokes must have a unique IP address after they have been NAT translated. They can have the same IP address before they are NAT translated."
Static NAT & DMVPN Hub ---> Another similar post.
Hope it helps.
Thanks.
Portu
Message was edited by: Javier Portuguez
09-24-2012 06:20 AM
thanks a lot for your help
09-24-2012 06:28 AM
I am glad to hear that
Please mark this post as answered.
Portu.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide