I have a Cisco 1841 router with Adv Sec package on it and need to set up a static IPSec tunnel to a Cisco 3030 concentrator. The trick is that the interesting traffic has to be NAT'd through a different IP than the interface IP.
So the peering must happen on x.x.x.34, but encrypted traffic from me must come from x.x.x.35. This is a requirement of the office that I am connecting to. I've set up tunnels before, but never with this type of requirement.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...