PIX (FOS 6.3) Nat traversal for VPN?

[0r8it]

Hi there- anyone have a sample config for Nat traversal on a PIX (501) running 6.3?

Sadly, I only have a single public IP, used by my router, and the ISP doesn't support PPPoE. So, my layout looks like this:

(ISP)---(Router)--(PIX)--LAN

As a result, I'm having to do RFC NAT on both the router and the PIX, and this is causing problems with terminating a PPTP (Windows) VPN on the PIX.

Anyone have a sample config that would help with this?

Cheers!

[monkeyboy]

...just put this in your usual vpn config:

isakmp nat-traversal 20

this encapsulates ipsec into udp port 4500

...if it's a site-to-site vpn make sure it's on both pixes

[0r8it]

Cheers Monkeyboy, I'll try this out as soon as I can.

Interesting command- I wonder what the "20" denotes?

Thanks

[0r8it]

Just found out- 20 is a timer.