NAT TRAVERSAL ON PIX

[ggozzi]

I have this prb:

Pix 506 with 6.3.3

Vpn client 4.0.1

I have the VPN client behin a NAT/PAT device whith udp encapsulation enabled.

On pix 506 I have configured the

isakmp NAT_traversal.

In the outside interace of pix i see the isakmp packet whith dest port 500 (not 4500)

and the phase 1 not start

Can anyone help me?

[mostiguy]

After you added the isakmp nat-traversal command, did you re-enter isakmp enable outside to reinitialize the isakmp configuration? If not, try that.

That said, I think you will always see the first isakmp packet(s) go to 500, but as things get negiotatied (included nat-traversal), traffic will eventually use the 4500 port