topic Re: ipsec over udp - simple question - pix in Network Security https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248652#M1060229 <HTML><HEAD></HEAD><BODY><P>PIX Firewall Version 6.3 provides a feature called "Nat Traversal,that is UDP Encapsulation of IPsec Packets.</P><P>Use the following command to enable NAT-T</P><P>isakmp nat-traversal [natkeepalive]</P><P></P><P>default natkeepalives is 20 sec. 10-3600 is the range</P><P>NAT traversal (NAT-T) supports both static and dynamic crypto maps.</P><P>Cihan</P></BODY></HTML> Wed, 11 Feb 2004 16:23:56 GMT cihan 2004-02-11T16:23:56Z ipsec over udp - simple question - pix https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248650#M1060227 <P>I have trawled through much documentation but cannot find a definitive answer to a basic question so I hope that one of you 'out there' can. Does (and if so which sw release) a pix support ipsec over udp (as per Cisco vpn client)? The pix being the tunnel endpoint.</P><P></P><P>The background is that I am trying to get a vpnclient behind a MS ISA server to establish a tunnel to a remote pix and failing. MS point to the article about the Cisco Concentrator 3300, with the latest firmware updates. My testing seems to indicate that the PIX in question does support it, since in one configuration not involving ISA but with client access through another PIX involving NAT seems to work just fine.</P><P></P><P>Many thanks any help you can provide.</P><P></P><P></P> Fri, 21 Feb 2020 07:13:44 GMT https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248650#M1060227 alan.morris 2020-02-21T07:13:44Z Re: ipsec over udp - simple question - pix https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248651#M1060228 <HTML><HEAD></HEAD><BODY><P>Currently PIX does not support IPSec over UDP.</P></BODY></HTML> Wed, 11 Feb 2004 15:03:08 GMT https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248651#M1060228 bbaley 2004-02-11T15:03:08Z Re: ipsec over udp - simple question - pix https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248652#M1060229 <HTML><HEAD></HEAD><BODY><P>PIX Firewall Version 6.3 provides a feature called "Nat Traversal,that is UDP Encapsulation of IPsec Packets.</P><P>Use the following command to enable NAT-T</P><P>isakmp nat-traversal [natkeepalive]</P><P></P><P>default natkeepalives is 20 sec. 10-3600 is the range</P><P>NAT traversal (NAT-T) supports both static and dynamic crypto maps.</P><P>Cihan</P></BODY></HTML> Wed, 11 Feb 2004 16:23:56 GMT https://community.cisco.com/t5/network-security/ipsec-over-udp-simple-question-pix/m-p/248652#M1060229 cihan 2004-02-11T16:23:56Z