GRE Tunnel through the PIX , one-to-many

[m.lima]

Have you guys configured some GRE tunnels through the PIX Firewall using a single external address for several tunnels ? I wanna be able to configure several tunnels using a single external address instead of one outside address for each tunnel.

Thanks,

Marcelo Lima

[kdurrett]

You will only need one external address, not the outside ip of the pix, to nat, if you are doing nat, your tunnel source ip address. On your router you should be using the same tunnel source ip address for all your gre tunnels so there is no need to have a external address for each tunnel interface. In your tunnel interefaces, you specifiy which ip address you are going to use as your tunnel source, like your routers WAN's side interface ip. Here's a link for th whole ball of wax. http://www.cisco.com/warp/public/707/quicktip.html

Sorry, couldnt find you just a sample on plain GRE.

Kurtis Durrett