Solved

Cisco cryptomap VPN *with* NAT

Posted on 2011-03-08
3
379 Views
Last Modified: 2012-08-13
Ok, normally when we create crypto map VPNs we dont want NAT to take place. In this case, I need to perform NAT hide behind a single IP address across the VPN connection.

How is this achieved with a cryptomap VPN? Im pretty sure I could do it no problem with a GRE tunnel based VPN.
0
Comment
Question by:Klinkeye
  • 2
3 Comments
 
LVL 6

Accepted Solution

by:
alienXeno earned 500 total points
ID: 35081292
You can applu "ip nat oustside and "crypto map" on your WAN connectio nand use "ip nat isnide" on the LAN interface. You will then need to defin NAT POOL which will have aCL that will define which traffic needs to be NATted.
0
 
LVL 4

Author Comment

by:Klinkeye
ID: 35084050
So is the order in packet processing something like this:
ACL > NAT > VPN ENCAPSULATION > ROUTING ?
0
 
LVL 4

Author Closing Comment

by:Klinkeye
ID: 35259897
Was close to the final solution. A little more config was required in my case.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Destination host unreachable 12 63
Stack Switches in IOU  web V22 6 60
Fortigate 100D NTP Issue 4 47
DHCP Server 14 60
The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

943 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now