Force a router to use NAT-T

Brian M · ‎12-12-2007

How do you force an IOS device to use NAT-T on a VPN connection?

I have an 871 using EZVPN to connect to a 3060 and it's connecting without transparent tunneling. I realize it should auto-detect but for some reason it's not. Is there any way to force it?

Thanks!

cisco24x7 · ‎12-13-2007

Router, by default, will try to use

NAT, unless you tell it not to:

default:

crypto ipsec nat-t udp

disable nat-t:

no crypto ipsec nat-t udp

In other words, nat-t is enable by default