VPN SITE TO SITE ON INTERNET BEHIND NATED NETWORK

[Gerardo Marciales]

Hi, I want share a VPN GNS Lab with the community:

One network located behind another nated network initiates a VPN client that will establish a secure tunnel enabling bidirectional IP traffic between the sites. 

In my blog the complete lab.

http://gmarciales.blogspot.com/

Regards.

[shine pothen]

Yes, we will be able to create VPN tunneling between the sites.

you need to create a static route statement on the client device pointing to the remote branch

create crypto map accesslist with the remote branch ip address

Create NAT Excemption with the Remote branch ip

these steps should make your VPN tunnel to work.

[Gerardo Marciales]

Hi, thanks for the answer, but this case is not exactly the most frequently site to site, because only one branch can behind the tunnel.

The tunnel in this case can be initialized only for the branch behind the other nated branch.

the static route wil be create on demand.

nat exceptions (deny)...., hummmm, really, is not necesary, because the remote branch is not nated network, is a private network behind another private network, and the main branch is not necesary doing nat.

Like I told, is mot the most frecuently site to site.

Best regards.