Thanks, it's the time to move to 7 OS :)<br><br>
<div><span class="gmail_quote">On 12/12/06, <b class="gmail_sendername">Joseph Jackson</b> <<a href="mailto:JJackson@aninetworks.com">JJackson@aninetworks.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div lang="EN-US" vlink="blue" link="blue">
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">It is not supported on pix 6.x. You will have to run 7.x on the HQ pix only. </span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="2">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</span></font></b><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> Mounir Mohamed [mailto:
<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:mounir.mohamed@gmail.com" target="_blank">mounir.mohamed@gmail.com</a>] <br><b><span style="FONT-WEIGHT: bold">Sent:</span></b> Monday, December 11, 2006 4:00 PM
<br><b><span style="FONT-WEIGHT: bold">To:</span></b> Joseph Jackson<br><b><span style="FONT-WEIGHT: bold">Cc:</span></b> cisco-nas; <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-nsp@puck.nether.net" target="_blank">
cisco-nsp@puck.nether.net</a><br><b><span style="FONT-WEIGHT: bold">Subject:</span></b> Re: [c-nsp] Hub-Spoke IPSEC tunnels</span></font></p></div>
<div><span class="e" id="q_10f73f5eb5311a0b_1">
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Dear JJ,</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Thanks, but the document talking about PIX/ASA 7.x, my FW running 6.3 OS is the feature supported on 6.3?</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">i'm searching about intra interface communication on 6.3, but it's seems to be not found, any advice?</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Best Regards,</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Mounir Mohamed<br> </span></font></p></div>
<div>
<p><span><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">On 12/12/06, <b><span style="FONT-WEIGHT: bold">Joseph Jackson</span></b> <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:JJackson@aninetworks.com" target="_blank">
JJackson@aninetworks.com</a>> wrote:</span></font></span> </p>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Mounir,<br><br> On the HQ pix you will have to configure intra interface<br>communication so that the pix will forward packets out of the same
<br>interface it recivied the packet on. You will also of course need to<br>configure the remote routers to send traffic for the other sites over<br>the ipsec tunnel.<br><br>Here is a doc from cisco.<br><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807" target="_blank">
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807</a><br>34db7.shtml<br><br><br>-----Original Message-----<br>From: <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-nsp-bounces@puck.nether.net" target="_blank">
cisco-nsp-bounces@puck.nether.net </a><br>[mailto:<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-nsp-bounces@puck.nether.net" target="_blank">cisco-nsp-bounces@puck.nether.net</a>] On Behalf Of Mounir Mohamed
<br>Sent: Monday, December 11, 2006 3:08 PM<br>To: cisco-nas; <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-nsp@puck.nether.net" target="_blank">cisco-nsp@puck.nether.net</a><br>Subject: [c-nsp] Hub-Spoke IPSEC tunnels
<br><br>Dear All,<br><br>I have centeral Firewall (PIX535) in HQ peering via IPSEC tunnles with<br>other<br>3 branches, all branches using Cisco 1700 with IOS feature set currently <br>there is IPSEC tunnel between each branch and HQ FW, i need to configure
<br>the<br>centeral FW to doing routing between all branches, so if branch x need<br>to<br>communicate with branch y it should establish it's IPSEC with HQ, then <br>the<br>HQ using the incoming traffic to initiate IPSEC tunnel with y (if idel)
<br>then<br>routed the traffic between both branches.<br><br>Mainly i need to do Hub-Spoke IPSEC tunnels due to lack of hardware in<br>the<br>remote branches routers.<br>Is that allowed, If yes kindly advice.<br><br>--<br>
Best Reagrds,<br>Mounir Mohamed<br>_______________________________________________<br>cisco-nsp mailing list <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:cisco-nsp@puck.nether.net" target="_blank">
cisco-nsp@puck.nether.net</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="https://puck.nether.net/mailman/listinfo/cisco-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-nsp</a><br>
archive at <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://puck.nether.net/pipermail/cisco-nsp/" target="_blank">http://puck.nether.net/pipermail/cisco-nsp/ </a></span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br><br clear="all"><br>-- <br>Best Reagrds,<br>Mounir Mohamed </span></font></p></span></div></div></div></blockquote></div><br><br clear="all"><br>
-- <br>Best Reagrds,<br>Mounir Mohamed