[c-nsp] gre through nat

Jason LeBlanc jml at packetpimp.org
Fri Oct 20 09:10:09 EDT 2006


I've seen lots of docs in my testing and research but somehow didn't 
find that one.  In any case that is almost exactly the config I have 
currently except that I've had a router in between to test before 
shipping the router out for lack of easy access to an unused pix to test 
with.  The pix isn't under my management, perhaps I'll test with a pix 
in between as it just doesn't seem to work with the gre/ipsec being 
nated by the router.  Perhaps the pix handles the nat better than a 
router. (?)

Adam Greene wrote:
> Jason,
>
> Are you working with IPSec at all? Probably you're aware of this document 
> already, but just in case ...
>
> http://www.cisco.com/en/US/customer/tech/tk583/tk372/technologies_configuration_example09186a0080094bff.shtml
>
> Thanks,
> Adam
>
> ----- Original Message ----- 
> From: "Jason LeBlanc" <jml at packetpimp.org>
> To: <cisco-nsp at puck.nether.net>
> Sent: Friday, October 20, 2006 8:31 AM
> Subject: [c-nsp] gre through nat
>
>
>   
>> I have a question that I think I already know the answer to, but just to
>> be sure I'll ask here.  I have two routers with a pix in between doing
>> nat.  I'm pretty sure gre is not capable of being nated and I haven't
>> been able to get this to work in testing.  Can anyone please confirm so
>> I can give up trying and find another method. ;)
>>
>> Thanks,
>>
>> Jason
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>>
>>
>>
>>
>>     
>
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>   



More information about the cisco-nsp mailing list