topic Re: GRE and PIX in Network Security

GRE and PIX

susanto_leman — Fri, 21 Feb 2020 06:54:43 GMT

Hi All,

I want to do the tunnelling in GRE or IPIP mode on the router behind the firewall. Then I do static NAT on the router for the tunnel source. I have opened ip any any and GRE for that static IP but somehow, I got error messages such as no xlate..My PIX image is 6.2. Does 6.2 support GRE-passthru ??

How about 6.3(2) ??

any comments will be appreciated ...

thanks and regards

susanto

Re: GRE and PIX

drolemc — Mon, 11 Aug 2003 20:02:25 GMT

The 'no xlate' message indicates a problem with the translations. If the GRE router is located behind a PIX, it's better to let the PIX handle the translations (nat/pat etc).You could refer to the configuration example at http://www.cisco.com/warp/public/707/ipsecgrenat.html. You couls laso refer to http://www.cisco.com/warp/public/707/gre_ipsec_ospf.html.

Re: GRE and PIX

ncorder — Thu, 14 Aug 2003 17:56:29 GMT

6.3 does handle GRE better. 6.3 has a pptp fixup option so if you happen to be trying to connect to a PPTP vpn then just enable pptp fixup and it will work. There is a bug in 6.3(1) that sometimes makes you try to connect twice before it works but 6.3(2) is supposed to fix that.