Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Site to Site VPN w/NAT traversal design question

Hi, I have a number of site to site VPNs which terminate on a PIX. I plan to migrate these VPNs to a router that is sat on a DMZ connected to the PIX. Before I do that I'm going to configure a new VPN to terminate on the router but I also need the VPNs that terminate on the PIX to not be affected.

If I configure NAT traversal on the PIX, will my other VPNs be affected?

Many Thanks in Advance

Dom

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: Site to Site VPN w/NAT traversal design question

Hi Dom,

Why do you want to configure NAT-Traversal on PIX if you are going to terminate your VPN on router (which is on DMZ).

Are you doing any NAT on PIX thru to Router?

If you want to configure NAT-Traversal it should be configured on the end devices (on Router in your case).

Example:

When a user with Cisco client or a Cisco router behind NAT wants to connect to another device (such as PIX, ASA or Router) NAT-T should be configured on the end-device (which will be PIX or ASA)

Hope that helps.

* Please rate the post

2 REPLIES
New Member

Re: Site to Site VPN w/NAT traversal design question

Hi Dom,

Why do you want to configure NAT-Traversal on PIX if you are going to terminate your VPN on router (which is on DMZ).

Are you doing any NAT on PIX thru to Router?

If you want to configure NAT-Traversal it should be configured on the end devices (on Router in your case).

Example:

When a user with Cisco client or a Cisco router behind NAT wants to connect to another device (such as PIX, ASA or Router) NAT-T should be configured on the end-device (which will be PIX or ASA)

Hope that helps.

* Please rate the post

New Member

Re: Site to Site VPN w/NAT traversal design question

Oh OK - That's cleared it up for me.

Many Thanks =]

856
Views
0
Helpful
2
Replies
CreatePlease to create content