[c-nsp] bridging/L2TPv3 between PIX and 2821?

Justin M. Streiner streiner at cluebyfour.org
Fri Aug 29 22:28:35 EDT 2008


I have a client who has some legacy gear at a remote site that needs to 
talk to other gear back at their main office.  Trick is, that the gear is 
legacy enough that it has no concept of a default gateway, so all of the 
legacy pieces need to be or functionally appear to be in the same subnet.

The traffic between the sites needs to be encrypted, but since some of the 
IP space on both ends would appear to be on te same subnet, getting IPSEC 
to work would be problematic.

If I had routers at both locations, I could probably do this with an 
L2TPv3 pseudowire, but there's a PIX involved, and I don't think it knows 
L2TPv3 well enough to be able to let me pass a pseudowire through...

MPLS would be nice too, but that's not an option in this design.

Has anyone here tackled something like this before?

jms


More information about the cisco-nsp mailing list