×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

PIX Version 7 - fixup protocol esp-ike

Unanswered Question

Good day,


On a PIX Version 7. We want to used a Cisco VPN client from the inside of this PIX to somewhere on the internet.


We had this setup before with version 6.3. The only command we had to add was "fixup protocol esp-ike" and it work no problem.


My questions are:


what is the replacement command for "fixup protocol esp-ike" in PIX version 7 ?


If there is no replacement command, then what is solution that will allow a Cisco VPN client to work from inside of a PIX version 7?


Thanks to all.




  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
srue Tue, 01/10/2006 - 19:22
User Badges:
  • Blue, 1500 points or more

"The fixup protocol esp-ike command is not supported in PIX Security appliance Version 7.0. This feature is suited for the PIX 501 and 506/506E platforms, which PIX Security appliance Version 7.0 does not currently support. The workaround requires that the client and head-end be NAT-T capable."

this is taken from the following:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/pix_upgd/pixupgrd.htm#wp1201896

Actions

This Discussion