I have a couple of 2811 routers that we're trying to connect up together over an IPSEC tunnel. We are trying to disable NAT-T on them so we'll just be passing UPD 500 and protocol 50 traffic (instead of udp 4500). Is there a way to do this? We are running an advanced security IOS.
I think you just have to enter the following command in global configuration mode.
no crypto ipsec nat-transparency udp-encapsulation
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
