aaaz

Confusion in NAT -T commands ?

author
TARUN ARORA
,
ZAP

 What is the use of below command

1.crypto ipsec nat-transparency udp-encapsulation

2. crypto ipsec nat-transparency spi-matching

3. no crypto ipsec nat-transparency udp-encapsulation

4. crypto ipsec nat-transparency aware dmvpn

  • Total 1 Answer
  • 3331
Can You answer this question?
author
Mr. Piyush Kataria

1) Usage-- NAT Traversal is auto detected and auto negotiated.

Command- crypto ipsec nat-transparency udp-encapsulation is already there

2) Usage -To disable NAT T use this command

Command- no crypto ipsec nat-transparency udp-encapsulation

3) Usage - It will disable nat t and perform PAT entries identification on SPI basis , it is used on NAT  Device when we disable NAT T on VPN endpoint.

Command- crypto ipsec nat-transparency spi-matching

4)Usage- For the NAT-Transparency Aware enhancement to work, you must use IPsec transport mode on the transform set.

Also, even though NAT-Transparency can support two peers  being translated to the same IP address using the User Datagram Protocol ports to differentiate them , this functionality is not supported for DMVPN.

All DMVPN spokes must have a unique IP address after they have been NAT translated. They can have the same IP address before they are NAT translated.

Command-Crypto ipsec nat-transparency aware 

 

 

Recommended

Whoops, looks like something went wrong.

1/1 ErrorException in Filesystem.php line 111: file_put_contents(/var/www/html/storage/framework/sessions/UzAq4HYwZxNL1fXJ8C20lOsUdBwnW1rhpGByLeSp): failed to open stream: No space left on device

  1. in Filesystem.php line 111
  2. at HandleExceptions->handleError(2, 'file_put_contents(/var/www/html/storage/framework/sessions/UzAq4HYwZxNL1fXJ8C20lOsUdBwnW1rhpGByLeSp): failed to open stream: No space left on device', '/var/www/html/vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php', 111, array('path' => '/var/www/html/storage/framework/sessions/UzAq4HYwZxNL1fXJ8C20lOsUdBwnW1rhpGByLeSp', 'contents' => 'a:4:{s:6:"_token";s:40:"GMbMe8i9EGU0iQxXultXwYq5FQl29Rb2vqlFwIZn";s:11:"viewed_urls";a:1:{i:0;s:27:"confusion-in-nat-t-commands";}s:9:"_previous";a:1:{s:3:"url";s:55:"http://www.networkbulls.com/confusion-in-nat-t-commands";}s:6:"_flash";a:2:{s:3:"old";a:0:{}s:3:"new";a:0:{}}}', 'lock' => true))
  3. at file_put_contents('/var/www/html/storage/framework/sessions/UzAq4HYwZxNL1fXJ8C20lOsUdBwnW1rhpGByLeSp', 'a:4:{s:6:"_token";s:40:"GMbMe8i9EGU0iQxXultXwYq5FQl29Rb2vqlFwIZn";s:11:"viewed_urls";a:1:{i:0;s:27:"confusion-in-nat-t-commands";}s:9:"_previous";a:1:{s:3:"url";s:55:"http://www.networkbulls.com/confusion-in-nat-t-commands";}s:6:"_flash";a:2:{s:3:"old";a:0:{}s:3:"new";a:0:{}}}', 2) in Filesystem.php line 111
  4. at Filesystem->put('/var/www/html/storage/framework/sessions/UzAq4HYwZxNL1fXJ8C20lOsUdBwnW1rhpGByLeSp', 'a:4:{s:6:"_token";s:40:"GMbMe8i9EGU0iQxXultXwYq5FQl29Rb2vqlFwIZn";s:11:"viewed_urls";a:1:{i:0;s:27:"confusion-in-nat-t-commands";}s:9:"_previous";a:1:{s:3:"url";s:55:"http://www.networkbulls.com/confusion-in-nat-t-commands";}s:6:"_flash";a:2:{s:3:"old";a:0:{}s:3:"new";a:0:{}}}', true) in FileSessionHandler.php line 83
  5. at FileSessionHandler->write('UzAq4HYwZxNL1fXJ8C20lOsUdBwnW1rhpGByLeSp', 'a:4:{s:6:"_token";s:40:"GMbMe8i9EGU0iQxXultXwYq5FQl29Rb2vqlFwIZn";s:11:"viewed_urls";a:1:{i:0;s:27:"confusion-in-nat-t-commands";}s:9:"_previous";a:1:{s:3:"url";s:55:"http://www.networkbulls.com/confusion-in-nat-t-commands";}s:6:"_flash";a:2:{s:3:"old";a:0:{}s:3:"new";a:0:{}}}') in Store.php line 128
  6. at Store->save() in StartSession.php line 88
  7. at StartSession->terminate(object(Request), object(Response)) in Kernel.php line 216
  8. at Kernel->terminateMiddleware(object(Request), object(Response)) in Kernel.php line 187
  9. at Kernel->terminate(object(Request), object(Response)) in index.php line 58
  10. at require_once('/var/www/html/public/index.php') in index.php line 20