Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
Simultaneous NAT overload (internet) and NAT overlapping for IPsec
Also, realised I'd mentioned above that SITE2 was using 10.0.0.0/16 - They're not, its 10.0.0.0/8 and hence the requirement to NAT our 10.1.1.0/24 subnet as 192.168.40.0/24 for all traffic destined to/from SITE2. -
Simultaneous NAT overload (internet) and NAT overlapping for IPsec
Hi Burtsbees, Yup, already tried that (adding 10.1.1.0 -> 192.168.40.0 into INTERNAL-OVERLOAD-TO-INTERNET) - Same thing - IPsec works but not overload NAT. (not even an entry logged when I added the log statement) I'm using a pool because I expect they're going to eventually have a larger... -
Simultaneous NAT overload (internet) and NAT overlapping for IPsec
Results of "debug ip nat detailed" on SITE1 when attempting to ping from SITE1PC (10.1.1.10) Code: SITE1# *Mar 1 02:12:05.459: NAT*: i: icmp (10.1.1.10, 6) -> (10.81.0.10, 6) [30] *Mar 1 02:12:05.463: NAT*: i: icmp (10.1.1.10, 6) -> (10.81.0.10, 6) [30] *Mar 1 02:12:05.467: NAT*... -
Simultaneous NAT overload (internet) and NAT overlapping for IPsec
Hi all, Have been bashing my head against this for the last couple of days and was wondering if anyone might be able to take a look at the config and point where I might be approaching this wrong... My current lab is configured as: Two sites (SITE1/SITE2) connected via a third third router...
