i have two networks with private ip address scheme and i want to connect them throug IPsec vpn tunnel, so when i will configure ipsec on both the sides do i need to configure nat or it will work without configuring nat.
Generally you make the IPSec packets bypass NAT, so that each IP address appears as its original address on the other LAN. This way your access-list that defines the encrypted traffic will say "FROM private net TO private net", and your NAT access-list will say "DON'T NAT private net TO private net but DO NAT private net TO anything else".
You don't say what your devices are so I can't help you much more. There's a plethora of sample configs for IPSec here though:
I have a question concerning " NAT per-destination-VPN":
from a given site (my site), there are many IPSEC VPNs created to other sites via the internet (site-to-site VPNs). I would like to NAT my site ip adresses, only for a given destination site, and no NAT for others. there might be other constraints as to NAT with different IP ranges for different destination VPNs.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in HA
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationCo...
I am currently unable to specify "crypto keyring" command when configuring VPN connection on my cisco 2901 router.
The following licenses have been activated on my router :