Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have 2 Cisco routers and they are connected via GRE over IPsec.
All of the traffic from the first router is being routed to the 2nd router with a default route.
I need to access internet from the 2nd router.

How should I config the NAT on the 2nd router so that the clients behind the 1st router can access the internet from the 2nd router?

share|improve this question

I just tested it in dynamips and it seems to work fine.

interface Tunnel0
 ip address
 ip nat inside
 ip virtual-reassembly
 tunnel source Serial0/0
 tunnel destination
 crypto map vpn
interface Serial0/1
 ip address
 ip nat outside
 serial restart-delay 0
ip route
ip nat inside source list 10 interface Serial0/1 overload
access-list 10 permit


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.