How to configure a Cisco 2811 router for IPSec passthrough

[dschlic1]

I have a client that has an existing Cisco 2811 router. I do not know what the current configuration of this router. However for a project we are building for this client, we will need to place a second wired router on the LAN side of the Cisco router. This wired router will need to have the ability of connecting and creating IPsec tunnels passing through the Cisco 2811 router to other devices on the Internet. The question I have is what changes or things I need to check and set in the Cisco router in order to do this?

Attached is a communications drawing of the proposed setup.

Communications Drawing

 

[imbadatthis]

well you will need a static nat if there are any devices building connections to your router from the internet.
you will need udp 4500&500 open for IPSec Tunnels.

you will need some sort of NAT outbound if your router is the only one initiating connections.


We must go always forward, not backward
always up, not down and always twirling twirling towards infinity.