nat traversal for VPN

[aksher]

Does nat traversal overides static nat and if there is no static nat does nat traversal work?

[JORGE RODRIGUEZ]

Hi Aksher, nat traversal feature is used to allow ipsec packets travel across nat devices, so you would use nat traversal whenever there are nat devices in between your vpn end points, this feature enables Ipsec peer stablish a connection through a NAT device by encapsulating ipsec traffic in UDP datagram using por 4500 to provide NAT devices with port information.. nat-t when enabled it autodetecs NAT devices and only encapsulates ipsec traffic when necessary.

to answer your question no, nat traversal does not overides static nat.

To grasp a beter understanding of nat traversal feature and its backround I couldn't find a better link for you than this link bellow.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080110bca.html#1049093

Rgds

Jorge

[aksher]

Thanks!!! Does it require a nat/static statement or it does not require when you use nat-traversal.