You do need NAT traversal if you "only" change the IP addresses. Fred Reimer - CCNA
Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing or transmission error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -----Original Message----- From: Raj [mailto:[EMAIL PROTECTED] Sent: Monday, September 08, 2003 11:14 AM To: [EMAIL PROTECTED] Subject: IPSEC with STATIC NAT [7:74971] Hey There I am working on a solution for IPsec using vpn concentrator and VPN hardware clients(PIX). The PIX outside has a public address and the only NAT taking place is at the edge router and the vpn concentrator sits behind this router. The router does a static public-to-private IP nat and i dont think I would need NAT traversal since it's not changing any ports..only changing IP's. Please let me know if there is anything I would need to do on the edge router doing the static NAT. I've heard that for STATIC nat to work with IPSEC, you need to adhere to certain standards. Thx to everybody in advance. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74979&t=74971 -------------------------------------------------- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html

