Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

NAT traffic over VPN tunnel on router IOS

I need to setup a VPN tunnel that NATs traffic over it.  I already have VPN tunnels established as well as NAT traffic.  I've done this on an ASA and VPN concentrator, but have seen some places where people say its not possible on a router nor have I seen any real hard evidence either way.  For example, I'm running a Cisco 2801 router with 12.4(8a) and Advanced Security.  This can be quite tricky because the subnet/vlan we need to NAT does need to pass traffic as normal over other VPN tunnels, and be NATed out to the Internet directly.  Are there, any limitations on this such as IOS version, being a router itself, NAT configuration, etc.  Any assistance is greatly appreciated.

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions

Re: NAT traffic over VPN tunnel on router IOS

Hi James,

You can NAT the VPN traffic as you do with ASAs on IOS routers.

What you do is that you create an ACL to define the traffic to be NATed, apply the ACL to a NAT rule, and condition that NAT statement with a route-map to only happen when traffic is going to be sent through the tunnel.

Federico.

1 REPLY

Re: NAT traffic over VPN tunnel on router IOS

Hi James,

You can NAT the VPN traffic as you do with ASAs on IOS routers.

What you do is that you create an ACL to define the traffic to be NATed, apply the ACL to a NAT rule, and condition that NAT statement with a route-map to only happen when traffic is going to be sent through the tunnel.

Federico.

1960
Views
0
Helpful
1
Replies
CreatePlease to create content