Solved

Cisco cryptomap VPN *with* NAT

Posted on 2011-03-08
3
385 Views
Last Modified: 2012-08-13
Ok, normally when we create crypto map VPNs we dont want NAT to take place. In this case, I need to perform NAT hide behind a single IP address across the VPN connection.

How is this achieved with a cryptomap VPN? Im pretty sure I could do it no problem with a GRE tunnel based VPN.
0
Comment
Question by:Klinkeye
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 6

Accepted Solution

by:
alienXeno earned 500 total points
ID: 35081292
You can applu "ip nat oustside and "crypto map" on your WAN connectio nand use "ip nat isnide" on the LAN interface. You will then need to defin NAT POOL which will have aCL that will define which traffic needs to be NATted.
0
 
LVL 4

Author Comment

by:Klinkeye
ID: 35084050
So is the order in packet processing something like this:
ACL > NAT > VPN ENCAPSULATION > ROUTING ?
0
 
LVL 4

Author Closing Comment

by:Klinkeye
ID: 35259897
Was close to the final solution. A little more config was required in my case.
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While it is possible to put two routes in place with the secondary having a higher metric, this may not always work. In the event of a failure that does not bring down the physical interface on the router the primary route is not removed. There is a…
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month9 days, 18 hours left to enroll

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question