# Cisco ASA Site-to-Site IKEv1 IPsec VPN

**URL:** https://forum.networklessons.com/t/cisco-asa-site-to-site-ikev1-ipsec-vpn/825
**Category:** Lessons Discussion
**Created:** [December 19, 2016, 4:39pm UTC](https://forum.networklessons.com/t/cisco-asa-site-to-site-ikev1-ipsec-vpn/825 "2016-12-19T16:39:50Z")
**Posts on this page:** 1
**Showing post:** 75

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [March 8, 2019, 10:29am UTC](https://forum.networklessons.com/t/cisco-asa-site-to-site-ikev1-ipsec-vpn/825/75 "2019-03-08T10:29:42Z")

</div>

Hello Jones

Can you specify which lesson in particular you are referring to? There are several site to site VPN lessons using the ASA on the site. Let us know and we can answer your question more appropriately.

As for NAT-T, IPsec VPN clients can use NAT traversal to allow for ESP (Encapsulating Security Payload) packets traverse NAT. Several protocols within the IPsec framework must be enabled to traverse both firewalls and NAT including IKE, ESP, AH. UDP port 4500 is used for IPsec NAT traversal. These features are sometimes called IPsec Passthrough features.

If you would like Rene to consider including a lesson on NAT-T and IPsec, feel free to make a suggestion at the Lesson Ideas link below:

> **[Lesson Ideas - NetworkLessons.com](https://networklessons.com/lesson-ideas)**
>
> This page allows networklessons members to share what content they would like to see in the future.

I hope this has been helpful!

Laz

---

_[View the full topic](https://forum.networklessons.com/t/cisco-asa-site-to-site-ikev1-ipsec-vpn/825)._