Site to Site VPN

patcbr600 · ‎02-07-2009

Hello all,

I am trying to create a site to site vpn with two cisco routers, the tunnel is working fine and i have connectivity beteewn the lan's. Now on one site want to make nat from the souce addr to the outside addr. Its is possible to do this , making nat from the src add to the outside addr before adding the traffic to the tunnel.

Many thanks

royalblues · ‎02-07-2009

Yes its possible

When you have both NAT and crypto map applied on the interface, the order of operation is NAT first and then encrption. Have a look at the below link

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml

HTH

Narayan

patcbr600 · ‎02-08-2009

Hi,

But is possible to make the nat to the ip address of the outside interface ?

Many thanks

royalblues · ‎02-08-2009

Yes possible

have a look at the attached configs

Topology R0->R1->R2->R3

Crypto between R1 and R2 and R1 does a interface NAT for the interesting traffic

HTH

Narayan