PIX Version 7 - fixup protocol esp-ike

fbenny · ‎01-10-2006

Good day,

On a PIX Version 7. We want to used a Cisco VPN client from the inside of this PIX to somewhere on the internet.

We had this setup before with version 6.3. The only command we had to add was "fixup protocol esp-ike" and it work no problem.

My questions are:

what is the replacement command for "fixup protocol esp-ike" in PIX version 7 ?

If there is no replacement command, then what is solution that will allow a Cisco VPN client to work from inside of a PIX version 7?

Thanks to all.

srue · ‎01-10-2006

"The fixup protocol esp-ike command is not supported in PIX Security appliance Version 7.0. This feature is suited for the PIX 501 and 506/506E platforms, which PIX Security appliance Version 7.0 does not currently support. The workaround requires that the client and head-end be NAT-T capable."

this is taken from the following:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/pix_upgd/pixupgrd.htm#wp1201896