Ipsec vpn using crypto map model and NAT.

[leandro roggerone]

Is there any example to follow about a simple site to site and nat scenario ?

My scenario is as follows :

(192.168.222.0/24) [CISCO_asr1002](200.1.1.1)=========(INTERNET)=======(201.1.1.1)[REMOTE_ASA]

REMOTE ASA, is not managed by me , so now I need to focus only only on the asr1002.

It would be great if someone can point some example to follow.

Thx.

Leandro.

[Collin Clark]

Here are some configuration examples

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_vpnips/configuration/xe-3s/asr1000/sec-ipsec-virt-tunnl.html#GUID-E3B3DAA7-282B-44D6-BA11-BEECE495D5F4

[leandro roggerone]

Dear Collin Clark , thankyou very much for your response.

The link you recommend is great but I can not use it since the other end point device (ASA) doesnot support VTI model so both should stick to crypto map model.

Also , I need to use NAT for a new ipsec connection on a interface where I already have another working session without NAT ... Im wondering if this is possible ....

Ok , so if you can help me on this again It would be great, thanks !!

Leo.