Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

isakmp nat-t support in sup720 images

Can anyone tell me what version of the 12.2 SX train has support for nat-t with ipsec/isakmp? The software tools are no help, and I haven't gotten very far with TAC. I am running 12.2(17d)SXB10, and am having trouble getting a netscreen to connect if it is behind nat. It works fine if no nat. From the isakmp debug, it looks like the MSFC recognizes NAT-T, but the 'crypto isakmp nat-transparency' command is not recognized. I need to know if my problem is release-related or an interoperability problem. Thanks

1 REPLY
Silver

Re: isakmp nat-t support in sup720 images

Also added in Cisco IOS Release 12.3(9a) and 12.3(11)T is the capability to have the hub DMVPN router behind static NAT. This was a change in the ISAKMP NAT-T support. For this functionality to be used, all the DMVPN spoke routers and hub routers must be upgraded, and IPSec must use transport mode

109
Views
0
Helpful
1
Replies
CreatePlease login to create content