GRE\IP Tunnels between Cisco Router and PIX

[mnlatif]

Hi,

Is it possible to establish GRE\IP (no IPSec) between a Cisco IOS router and PIX ? Is there any document i can refer to ?

Regards \\ Naman

[gfullage]

The PIX won't terminate a GRE tunnel specifically. You can pass a GRE tunnel THROUGH a PIX and terminate it on an inside router, although not something I'd probably recommend.

If you do want to do that, you have to assign a static translation for the inside router interface, then just allow IP protocol 47 through from IPSec peer to that static address.

[mnlatif]

Thank you very much.

[dean_holroyd]

Hello

You cannot terminate GRE onto a pix, but as the last reply said you can pass GRE tunnels through a PIX, which is a far as I am aware is the only way to pass OSPF/EIGRP routing information and non IP traffic through an IPSec VPN terminated on a PIX as IPSec does not support non IP traffic or the multicast hellos of these routing protocols. So I think in some circumstances GRE through the PIX is useful.

Cheers

ps For some reason GRE information has become more difficult to find since the website has changed