i tried that setup, but this ruins static NAT.

can you show me the configuration example?

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cbef60d

Hi Sergey,

your configuration is very complex. It requires step-by-step configuration, test, and debugging that is impossible to be done in within this forum. Also suggest you get a support contract so you will be able to search and watch bugs yourself.

Good luck!

found my problem,

CSCds24740

if i could get support contract i wouldn't ask here.

i wonder if there is similar bug for my NAT problem.

Hi,

Not sure what router you have, but for something like a 2801, support contact is about USD 300 per year and can be bought from any cisco reseller.

I know, but, my senior collegues managed to buy 8 routers and two PIXes, but forgot about support contract. and spending some more money in big company isn't easy task for now.

Any way, what's so complex in my config for CCIE, especially if we remove tunnel part, which is known bug right now ?