From: Merv on

Mike,

Take a ook at this VTI config example;

http://cco.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080455b00.html#wp1104791


It shows the tunnel interface CONFIGURED with ip nat inside and the
phyiscal outside interface with ip nat outside


From: Mike Gauthier on
On Mon, 12 Nov 2007 10:32:44 -0800, Merv wrote:

> Mike,
>
> Take a ook at this VTI config example;
>
> http://cco.cisco.com/en/US/products/ps6350/
products_configuration_guide_chapter09186a0080455b00.html#wp1104791
>
>
> It shows the tunnel interface CONFIGURED with ip nat inside and the
> phyiscal outside interface with ip nat outside

I've grabbed some spare 3825s that were destined for a data center
upgrade in Europe. I built a small lab network today and will be testing
several different aspects of VTIs, crypto maps, and NAT tomorrow.

Thank you for your help Merv. Quite helpful, unfortunately, nothing
seemed to help. Do you think PFS could have anything to do with it?
This particular VPN uses it. Ah... I'll save for the playground tomorrow.

Thanks again.

MikeG
From: Merv on
Mike,

Please post your results as the Cisco docs are pretty thin when it
comes to VTI especially in the presence of NAT.

Merv


From: Mike Gauthier on
On Wed, 14 Nov 2007 02:40:26 -0800, Merv wrote:

> Mike,
>
> Please post your results as the Cisco docs are pretty thin when it comes
> to VTI especially in the presence of NAT.
>
> Merv

Most definitely will. Hope to have something to post by the end of the
day (unless more fires erupt... seems to always happen when I *WANT* to do
a particular thing).

MikeG
From: Mike Gauthier on
On Wed, 14 Nov 2007 02:40:26 -0800, Merv wrote:

> Mike,
>
> Please post your results as the Cisco docs are pretty thin when it comes
> to VTI especially in the presence of NAT.
>
> Merv

It's been one fire after another this week (down lines in the
Philippines, AC out in our lab, etc.). Hopefully I'll get to play around
on Friday.

MikeG