Cisco 506 NAT IPSec

lchristie · ‎06-12-2002

I was wondering if it was possible to have an IPSec tunnel originate within a local area network that sits behind a 506 with NAT'ing enabled. I have tried to use the following command to get this to work to no avail.

sysopt connection permit-ipsec command

The IPSec client that resides behind the firewall requires authentication header and I assume that is where my problem lies. Much thanks in advance.

lisa.hall · ‎06-18-2002

As long as the client is getting a real NAT address and not a PAT address you should be fine. Does your client software support NAT transparency mode like the one for the Cisco VPN concentrators?