[FAQ-E] Site to Site VPN - How to Enable NAT Traversal in H Series Devices for IKEv1?

When configuring IKEv1 on H Series devices, you may encounter settings related to NAT Traversal (NAT-T). This feature is crucial when VPN peers are located behind NAT devices.

Is NAT Traversal enabled by default?

Yes, on H Series devices, NAT Traversal is enabled by default for IKEv1. This ensures smoother VPN connectivity even when devices are behind NAT.

Additional Recommendation:

Enabling UDP Encapsulation, which allows ESP traffic to be encapsulated within UDP packets using port 4500, further enhances compatibility and security. This is especially useful when standard ESP traffic is blocked or not properly handled by intermediate NAT devices.