From: Albert Lu (albert_lu@optushome.com.au)
Date: Tue Feb 18 2003 - 21:03:58 GMT-3
Hi,
Yes it works, as long as it's using NAT and not PAT. Just make sure your
IPSEC peer is the global IP address not the private IP address in your
crypto maps.
Albert
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Guy Van Ranst
Sent: Wednesday, February 19, 2003 6:17 AM
To: ccielab@groupstudy.com
Subject: IPSEC and static NAT
Hi group,
Is there a way to create an IP-sec tunnel between the private ip-address
on router A
and the public ip address on router C?
------------ ------------
------------
| Router A |------------| Router B |---- INTERNET ----------| Router C
|
------------ ------------
------------
Static NAT will be implemented on Router B by the ISP, but I have no
access to this box.
The private address (10.63.0.1) on Router A will be translated to a
public ip address.
Thanks,
Guy
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:27 GMT-3