Do you need NAT for a L2L VPN

[stevezups]

Hi all,

I have to create a L2L VPN tunnel between us and another local carrier. We are using a 3845 router and the other carrier is using a 3745 router. I have created many VPN tunnels in the past using NAT. In this case I don't have to. Is it possible for a VPN tunnel to work with the same configuration without using NAT. My router and the device being connected to all have a public IP address in the same subnet.

Thanks,

Stevan

[a.kiprawih · Accepted solution]

Hi,

Yes, you can create L2L without having to use NAT.

Check the configuration examples (under Site-to-Site VPN with PIX/IOS):

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

Before this, you probably has many experience configuring tunnel as shown in the url below:

http://www.cisco.com/en/US/partner/tech/tk583/tk372/technologies_configuration_example09186a00800949ef.shtml

Rgds,

AK

[a.kiprawih]

If you're using PIX/ASA, disable the nat using the 'nat 0' command.

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_configuration_example09186a008009484e.shtml

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727ab.html#wp1032129

Rgds,

AK