ipsec and nat

[arturo.reyna]

Hi:

I want to establish a VPN LAN to LAN over IPSEC through a PIX Firewall, I have a VPN concentrator 3005 in a DMZ in my PIX and the cliente has a FREESWAN linux, I am using a NAT for the ip address of the public interface of the VPN 3005.

The VPN never goes up, client receive messages about two diferents address in my side (real and nat adress).

It is possible to use nat and ipsec in other devices no-cisco?

I tested the VPN out of the PIX Firewall and it works OK.

What issues can i check?

Thank you.

[afakhan]

Hi,

Just make sure that you have static NAT configured for vpn3k outside interface, and it should allow UDP500 and ESP/AH traffic.

Thx

Afaq