IPSEC over UDP

[scolombo]

I have the following problem.

A customer wants to connect two sites with a IPSEC VPN. On one site the router is directly connected to internet with a public address , so no problem.

The other site connects to internet by mean of a third party VOIP equipment , which we don't manage , that NAT the internal cisco router private address to a public address.

The problem is that they are only able to nat TCP/UDP/IP ports .

So we were unable to successfully set up the VPN.

Can anyone provide me an help to get this configuration running ?

thanks

[jsivulka]

IPSec over UDP is supported on routers. Make sure you have an image that supports this feature.

Use the IPSec NAT Transparency feature to address many known incompatabilites between NAT and IPSec.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ftipsnat.htm