2800 w/ site-site tunnel using NAT and user tunnels

Unanswered Question
Mar 14th, 2008
User Badges:

I am using a 2800 to terminate a site-site IPSec tunnel using a crypto map. It is also used to terminate several user tunnels.

Because of overlapping private address space there is a source NAT rule in place that overloads addresses prior to routing them across the site-site tunnel.

The problem is that the user tunnels are not able to communicate with any host located on the far end of the site-site tunnel. The site-site tunnel (and it's NAT) works just fine for users coming from any other interface on the 2800.

Does anyone have any ideas? I've gone ahead and attached the existing configuration for those that are brave or incredibly smart :) It is a fairly trashed config though, and I'm still trying to clean it up from where it was.

Thank you VERY much ahead of time,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion