Disabling NAT-T on a 2811 router

Answered Question
Aug 17th, 2009


I have a couple of 2811 routers that we're trying to connect up together over an IPSEC tunnel. We are trying to disable NAT-T on them so we'll just be passing UPD 500 and protocol 50 traffic (instead of udp 4500). Is there a way to do this? We are running an advanced security IOS.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
slmansfield Mon, 08/17/2009 - 07:15

I think you just have to enter the following command in global configuration mode.

no crypto ipsec nat-transparency udp-encapsulation


This Discussion