Hi all >From 12.4(6), spokes behind NAT can form spoke to spoke tunnels.
You can find more explanation at the following location: http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_DMVPN_ps6441_TSD_Products_Configuration_Guide_Chapter.html#wp1122466 http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/dmvpn_dt_spokes_b_nat_ps6441_TSD_Products_Configuration_Guide_Chapter.html As per http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/dmvpn_dt_spokes_b_nat_ps6441_TSD_Products_Configuration_Guide_Chapter.html#wp1056200, If the hub finds that there is a spoke behind the NAT then the resolution request from a spoke is not answered by the hub rather forwarded to other spoke. Let's spoke A need resolution for spoke B, then spoke A sends resolution request to hub and then hub doesn't reply but sends the request to spoke B. The spoke B responds to the query to spoke A. It seems the NHRP behavior varies a lot for each implementation NHRP Phase 1 =========== All the traffic flows through hub. NHRP phase 2 =========== The spoke A sends request to hub (nhs) for spoke B and the hub replies with the NMBA address of the spoke B. NHRP phase 2 with NAT Transparency aware ================================= The spoke A sends request to hub for spoke B and the hub forwards the request to spoke B(owner of the NMBA address). The spoke B replies to the spoke A. NHRP phase 3 =========== The spoke A sends request to hub (nhs) for spoke B and the hub sends a redirect message to spoke A. Spoke A sends a request to Spoke B through the hub and then spoke B replies to Spoke directly. *Now how will NHRP phase 3 behave with NAT Transparency aware?* Please let me know, if my understanding of the above is correct. With regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
