NAT-traversal question

[jsol]

When configuring NAT-traversal in a PIX firewall, does it affect to all ISAKMP policies configured or you can "associate" it to the ISAKMP policy you want?

If it affects to all policies, does I have to reconfigure the remote sites which were already working properly without NAT-traversal?

Thanks,

[mostiguy]

It shouldn't be a problem for you - if you enable it, and don't on your other pixen, then those other pixen cannot negotiate it as they are not configured for it. It will only be used when both sides of the attempted tunnel can successfully negotiate it - in your environment, likely software clients and the main pix