Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started.

New Member

GRE through PIX and VPN3k

I'm having trouble with GRE through a VPN. The setup is 2600->PIX->VPN3K->2600. The problem seems to be the pix needs the crypto acl defined with GRE protocol 47, while the concentrator only seems to support ip in the network lists. This causes the pix to fail on proxy identities. Any ideas or direction? Thanks.

  • VPN
2 REPLIES
Bronze

Re: GRE through PIX and VPN3k

I have seen this before. You just need to include "ip" under your PIX proxy ID ACL... It will encrypt the GRE traffic. The concentrator will not support a Proxy ID as protocol 47 (GRE) only IP (as you mentioned). Consequently, the only solution is to configure "ip" under the PIX crypto ACL...

New Member

Re: GRE through PIX and VPN3k

I did have the crypto acl on the pix using ip. It didn't work. The PIX wouldn't encrypt the gre packets. I'll try again. I'm running 6.3(1) on the pix. Thanks.

136
Views
0
Helpful
2
Replies