Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

GRE and PIX

Hi All,

I want to do the tunnelling in GRE or IPIP mode on the router behind the firewall. Then I do static NAT on the router for the tunnel source. I have opened ip any any and GRE for that static IP but somehow, I got error messages such as no xlate..My PIX image is 6.2. Does 6.2 support GRE-passthru ??

How about 6.3(2) ??

any comments will be appreciated ...

thanks and regards

susanto

2 REPLIES
Silver

Re: GRE and PIX

The 'no xlate' message indicates a problem with the translations. If the GRE router is located behind a PIX, it's better to let the PIX handle the translations (nat/pat etc).You could refer to the configuration example at http://www.cisco.com/warp/public/707/ipsecgrenat.html. You couls laso refer to http://www.cisco.com/warp/public/707/gre_ipsec_ospf.html.

New Member

Re: GRE and PIX

6.3 does handle GRE better. 6.3 has a pptp fixup option so if you happen to be trying to connect to a PPTP vpn then just enable pptp fixup and it will work. There is a bug in 6.3(1) that sometimes makes you try to connect twice before it works but 6.3(2) is supposed to fix that.

100
Views
0
Helpful
2
Replies
CreatePlease to create content