cisco adsl 837 router + pix 501

[rob]

Hi,

I'm trying to do a site - site pix 501 vpn connection.

One of the VPN's sits behind a cisco adsl 837 router and I'm struggling to get the site-site vpn running.

How should I set it up, any ideas as the adsl router uses nat and then the pix does too.

cheers

Rob

[paddyxdoyle]

Hi Rob,

How's things?

Have you got NAT traversal configured on the PIX which wraps the IPSEC packets in a UDP header (4500) thus allowing the encrypted packets to be NATed.

NAT-T is negotiated during Phase1 (isakmp)

On the PIX it will be:

isakmp nat-traversal

HTH

PJD

[rob]

Hi Paddy, thanks for that!

How would I have the 837 set up to accommodate this?

I have 5 global IP addresses form the dsl ISP and would like to VPN one of them onto a 172.18.124.0/24 ip range.

Don't suppose you've got a sample config for the pix 501 and the 837 knocking around have ya as am pulling me hair out over here?

cheers matey!!!

[rob]

Hi Paddy,

Are you available for tech support on cisco kit, particularly pix's and vpn's?

My email address is rob@webstyleinternet.com.

[paddyxdoyle]

Have a look at the following link:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094498.shtml

HTH

Paddy