Hi everyone,

I'm trying to setup a lab enviroment to stablish a DMVPN. I have two routers CISCO 2811, IOS version 12.4(3j). I need to configure those routers to stablish a DMVPN. For the spoke router, I have have an ISP that provides dynamic addressing. For the hub router, I have a public static IP address assignde by the ISP. But I have a Watchguard firewall in the middle doing static 1-to-1 NAT for that address. Now the questions are:

1) Can I stablish the DMVPN between the routers with that firewall in the middle?

2) In case it is possible, what will the physical hub address be? And is there something I need to change on the firewall configuration?

3) In case it isn't possible, what other options do I have to stablish a VPN tunnel between the routers in those conditions?

Is there is anything else you need to know to understand the situation, please ask. I haven't configure neither of the routers yet, because I think I need to be sure of these concepts first. Thanks for any help you could bring.

Gustavo