Configuring NAT-T

To configure NAT-T on the current virtual router:

Select the name of the virtual router you want to configure.host1(config)#virtual-router westford host1:westford(config)#
Enable NAT-T for the current virtual router.host1:westford(config)#ipsec option nat-t

ipsec option nat-t

Use to enable NAT-T for the current virtual router.
With NAT-T enabled, IPSec traffic flows transparently through a NAT device, thereby allowing one or more remote hosts located behind the NAT device to use secure L2TP/IPSec tunnel connections to access the router.
The ipsec option nat-t command affects only those IKE SAs negotiated on this virtual router after the command is issued; it has no effect on previously negotiated IKE SAs.
Examplehost1:sunnyvale(config)#ipsec option nat-t
Use the no version to disable NAT-T for the current virtual router.
Use the default version to restore the default NAT-T setting on the virtual router, enabled.
See ipsec option nat-t.