Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Can I NAT prior to VPN Tunnel?

Hi,

I would like to add servers to a site to site ipsec tunnel configuration for transport.

However, I will need to NAT those machines for presentation at the other side.

For a Cisco 1760 (vpn endpoint) running on 12.3 code, is this possible?

If it is possible, could I get a link to a config? Or perhaps a snippet here?

We are using two ethernet interfaces for this:

ethernet1/0 is the inside

ethernet0/0 is the outside

Can't seem to find any documentation for it.

Thanks,

Paul

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Can I NAT prior to VPN Tunnel?

This is the 'NAT Order of Operation' employed by Cisco devices, It seems NAT is before the crypto check anyway

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml

Regards

Farrukh

1 REPLY

Re: Can I NAT prior to VPN Tunnel?

This is the 'NAT Order of Operation' employed by Cisco devices, It seems NAT is before the crypto check anyway

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml

Regards

Farrukh

125
Views
0
Helpful
1
Replies