vpn on 2811 + overlapping networks + all natting on one side

Unanswered Question
Nov 21st, 2007
User Badges:


I've a vpn setup with the same private networks at both sides.

We don't control the other vpn peer and my customer wants to do all the natting on his side.

With a pix/asa it is possible to nat the source and destination on one side of a vpn setup (bi-directional translation):


Has someone done the same setup with a router (2811 with ADVSECURITY)?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
hadbou Tue, 11/27/2007 - 07:01
User Badges:
  • Bronze, 100 points or more

Yes, the PIX performs a bi-directional translation so that the two private LANs can communicate over the IPSec tunnel.


This Discussion