Nat - Cisco ROUTER-SDM-CD User Manual

Chapter 6 Edit Interface/Connection
Note
Note
Note
Making Association Changes

NAT

OL-4015-12
An interface can be associated with only one IPsec policy.
To create a GRE-over-IPsec Tunnel, you must first associate the policy with the
tunnel interface, and then associate it with the source interface for the tunnel. For
example, if you wanted to associate a policy with Tunnel3, whose source interface
is Serial0/0, you would first choose Tunnel3 in the Interfaces and Connections
window, click Edit and associate the policy with it, and then click OK. Then you
would choose the Serial0/0 interface and associate the same policy with it.
EzVPN
If the interface is used in an Easy VPN connection, the name of the connection is
shown here.
An interface cannot be used in both a virtual private network (VPN) connection
and an Easy VPN connection.
When you change the association properties of an interface, the changes are
reflected in the lower portion of the Edit Interface/Connection window. For
example, if you associate an IPsec policy with the interface, the name of the IPsec
policy appears in the lower portion of the window. If you delete an association,
the value in the Item Value column changes to <None>.
If you intend to use this interface in a NAT configuration, you must designate it
as either an inside or an outside interface. Choose the traffic direction to which
NAT is to be applied. If the interface connects to a LAN that the router serves,
choose Inside. If it connects to the Internet or to your organization's WAN,
choose Outside. If you have chosen an interface that cannot be used in a NAT
configuration, such as a logical interface, this field is disabled and contains the
value Not Supported.
Cisco Router and Security Device Manager 2.5 User's Guide
NAT
6-11