Re: IPSEC with NAT

There should be no issues as long as your ISP does not filter out UDP/500,
UDP/4500 and ESP.
I did such deployment using AnyConnect and terminating SSL VPNs on the ASA
(behind 3G router).

HTH,

--
Piotr Matusiak
CCIE #19860 (R&S, Security)
Technical Instructor
website: www.MicronicsTraining.com
blog: www.ccie1.com
If you can't explain it simply, you don't understand it well enough -
Albert Einstein
2010/7/31 DN817 <ndheeraj.ccie_at_googlemail.com>
> Hi Experts,
>
> I am trying to run IPSEC between an Internet router(with public IP address)
> and another router which got access to internet over a 3G mobile network.
> The 3G provider only assigns private address but is static NATed to a
> public
> IP address with in their cloud.
>
> Please advise whether it is possible to run IPSEC between these 2 routers
> over the internet.
>
> R1(IP=80.x.x.x) == INTERNET == 3G Network (where IP 10.1.1.1 is NAT ed to
> 90.x.x.x) == 3G Device with WAN IP - 10.1.1.1
>
> Thanks,
> DN
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net