07-31-2008 02:19 AM - edited 02-21-2020 03:52 PM
Hello,
I have Pix 515E PIX Version 6.2(2).I am trying to setup easy VPN server on it. This pix did not recognised the following comand line.
1.
crypto dynamic-map outside_dyn_map 70 set reverse-route
2.
crypto isakmp nat-traversal 70
or isakmp nat-traversal 70
3. Tunnel-group
are there any command line that I can use inplace of these.I have also attached my config so I would be very grateful if someone could check and advice me what needs to done to bring this connection up.
Thanks
Solved! Go to Solution.
07-31-2008 07:20 PM
Have a look at this:
Yes nat-t is available on 6.3.x and above and not it is not enabled by default on the PIX/ASA. On the IOS it is.
Please rate if helpful, Regards
Farrukh
07-31-2008 03:45 AM
Hi,
Tunnel-group is not required in 6.x as you use the command vpngroup.
NAT is detected automatically, so you don't need any special configuration for it.However, you should have the ability to enter the command "isakmp nat-traversal 20". This is only to specify the timeout (default 20). NAT-T is always enabled by default.
You can configure the use of NAT transparency on the VPN client.
Please rate if this helped.
Regards,
Daniel
07-31-2008 05:20 AM
Hello Daniel,
I tried it but it did not work. I think Nat -traversal is supported on the version 6.3 and above.
would somebody be able to send me the right configs for Easy VPN Server that would work on Version 6.2(2)?
Thanks
07-31-2008 07:20 PM
Have a look at this:
Yes nat-t is available on 6.3.x and above and not it is not enabled by default on the PIX/ASA. On the IOS it is.
Please rate if helpful, Regards
Farrukh
08-01-2008 04:33 AM
08-01-2008 05:41 AM
Hello Farrukh,
it is working now. thanks for your support
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: