Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

How to disable NAT on a Easy VPN 2801 hardware client (NEM)?

Hi, I need to disable NAT on a Easy VPN 2801 hardware client (Network Extension Mode).

I successfully disable NAT for traffic traveling in to the tunnel, but I couldn't disable NAT for the split tunnel traffic. NAT still translating traffic with the outside interface as a source IP.

1 REPLY
Cisco Employee

Re: How to disable NAT on a Easy VPN 2801 hardware client (NEM)?

Hi,

As I understand that you don't want to NAT traffic going outside the VPN Tunnel and leaving the External interface ?

In that case you can exempt that traffic in your regular NAT config (E.g. exempted in the ACL etc as referenced in 'ip nat inside source list..." statement) and then configure "nat allow" under the "crypto ipsec client ezvpn..." config.

Thanks,

Naman

412
Views
0
Helpful
1
Replies
CreatePlease to create content