Ipsec Option Nat-T - Juniper JUNOSE 11.1.X - COMMAND REFERENCE A TO M 4-9-2010 Command Reference Manual

JUNOSe 11.1.x Command Reference Guide A to M

ipsec option nat-t

[ no | default ] ipsec option nat-t
Syntax
Command introduced before JUNOSe Release 7.1.0.
Release Information
Enables IPSec Network Address Translation Traversal (NAT-T) for the current virtual
Description
router. With NAT-T enabled, IPSec traffic flows transparently through a NAT device,
thereby allowing one or more remote hosts located behind the NAT device to use
secure L2TP/IPSec tunnels to access the router. The ipsec option nat-t command
affects only IKE SAs negotiated on this virtual router after the command is issued; it
has no effect on previously negotiated IKE SAs. The no version disables NAT-T for
the current virtual router. The default version restores the default NAT-T setting,
enabled.
Global Configuration
Mode
1008
ipsec option nat-t