Hi all,

I would like go to internet via central office through a ipsec tunnel but i can not NAT origin traffic in central office because my ipsec inbound interface is the same of my internet interface.

Remote Office          <--------- IPSEC site to site over Internet -------->      Central Office(CO)

192.168.33.0/24                                                                                192.168.254.0/24

When i try to surf from Remote Office, the packets goes via ipsec and i can view decryption in CO, then CO router route packets via his default route. The default route is via the same interface that inbound ipsec, then, i can not set an ip nat inside in any interface because the packets enter and go out via the same interface.

Somebody can help me?

Thanks in advance.