3G environment IPSEC need to increase the NAT ride-through

Publication Date:  2012-11-01 Views:  187 Downloads:  0
Issue Description
Customer equipment distribution end uses fixed broadband access, the headquarters end uses 3G network build ipsec tunnel, through the command “dis Ike sa” see that the distribution end displayed tunnel has been established, but the data is impassable (can't see headquarters tunnel situation), other distribution is able to communicate with headquarters
Alarm Information
None.
Handling Process
View customer configuration, other division configuration, “Ike sa” and “ipsec sa” found that this division customer configuration did not configure “NAT” ride-through, inform customer that IP address assigned by the 3G NIC in the operator's3G network actually has been done NAT conversion, so need to be configured NAT ride-through to satisfy the 500 and 4500 port communication at the same time. 
Root Cause
Configuration problem.
Suggestions
Suggest configure NAT ride-through when using ipsec in 3G network environment. 

END