Configuring NAT Traversal

Last Updated : Apr 10, 2018 |

Procedure

  1. Enable NAT Traversal by entering crypto ipsec nat-transparency udp-encapsulation.

    For example:

    Gxxx-001# crypto ipsec nat-tranparency udp-encapsulation
Done!
  2. Enable NAT Traversal keepalives and configure the keepalive interval in seconds by entering crypto isakmp nat keepalive, followed by a number from 5 to 3600.

    NAT Traversal keepalives are empty UDP packets that the device sends on a periodic basis at times of inactivity when a dynamic NAT is detected along the way. These keepalives are intended to maintain the NAT translation alive in the NAT device, and not let it age-out due to periods of inactivity. Set the NAT Traversal keepalive interval on the Branch Gateway to be less than the NAT translation aging time on the NAT device.

    For example:

    Gxxx-001# crypto isakmp nat keepalive 60
Done!
Related information
NAT Traversal