Nat Traversal on 3725

Hi all, my company already has a pair of routers (3725) at head office and several branch sites using 1801s. The small branches use ADSL and hence have public fixed IP addresses. Three are the usual GRE tunnels encrypted with IKE/IPSEC. The 1801s use Transport Mode (not Tunnel Mode).

What I've been asked is, if a mobile branch could be put together. The same 1801 will be used with the same encrypted GRE tunnel but it will be behind an ADSL router and so NAT'd. I know I have to configure NAT traversal and have read -

question is, can I enable NAT traversal on the head office without affecting other tunnels that don't require it?

Alternatively, I know that Nokia VPN boxes (Sadly dicontinued) and ASAs can use a management proxy for dynamically addressed sattelite nodes. Can this also be done with Cisco boxes?

BR Musiknut

read more and respond »

Posted 5 years ago by musiknut in Cisco Systems

Report misuse