GRE and PIX

[susanto_leman]

Hi All,

I want to do the tunnelling in GRE or IPIP mode on the router behind the firewall. Then I do static NAT on the router for the tunnel source. I have opened ip any any and GRE for that static IP but somehow, I got error messages such as no xlate..My PIX image is 6.2. Does 6.2 support GRE-passthru ??

How about 6.3(2) ??

any comments will be appreciated ...

thanks and regards

susanto

[drolemc]

The 'no xlate' message indicates a problem with the translations. If the GRE router is located behind a PIX, it's better to let the PIX handle the translations (nat/pat etc).You could refer to the configuration example at http://www.cisco.com/warp/public/707/ipsecgrenat.html. You couls laso refer to http://www.cisco.com/warp/public/707/gre_ipsec_ospf.html.

[ncorder]

6.3 does handle GRE better. 6.3 has a pptp fixup option so if you happen to be trying to connect to a PPTP vpn then just enable pptp fixup and it will work. There is a bug in 6.3(1) that sometimes makes you try to connect twice before it works but 6.3(2) is supposed to fix that.