GRE tunnel over sattelite connection through a win 2k box running winroute

[mseanmiller]

I'm having a problem setting up a GRE tunnel. I'm just using a basic tunnel config.

interface Tunnel195

ip address 172.195.0.2 255.255.255.252

tunnel source Ethernet0/0

tunnel destination 66.82.92.250

The problem is that there is a win 2k system between the two cisco 2600's. The win 2k system is using "keiro winroute". I am only able to obtain 1 routable IP address and it is assigned to a win 2k system. One por is directly connected to the sattelite connection the other to the cisco 2600. I have mapped a port (24705), using winroute, to the cisco 2600 router so I am able to now telnet to the router using the public IP address with a port number (i.e. 66.88.54.25 24705). In the tunnel destination I cannot add a port number. Is there a way around this or a way to include a port number in the tunnel setup.

Any help is appreciated.

Thank you

Sean

[rsissons]

I do not really understand yor topology here but basically the answer to your question is no, there is no way to include a port number in the tunnel but you can put access list on the tunnel interface to restrict traffic if that would help.

The other solution most often used when the number of rooutable addresses is restricted is NAT, Network Address Translation.

[mseanmiller]

In all of my other GRE tunnels I have a routable public static IP address assigned to the outside interface of each cisco 2600. All tunnels are created through the internet. In this perticular case I don't have a routable public static IP address for the cisco 2600. The cisco sits behind a windows 2000 system that is acting as a router. This win 2k system has a static IP assigned to it's external interface and a private on its internal interface. Can I still set up a tunnel to a 2600 that doesn't have a public IP address?

(10.10.0.0)cisco 2600(65.203.xx.xx) <--> internet <--> (66.82.xx.xx)win 2000 router w/nat(192.168.0.1) <-1 hop-> (192.168.0.2)cisco 2600(10.195.0.1)

[mseanmiller]

I have worked with the winroute vendor and they have helped me fix the problem.

We port mapped the following ports from the win2k router to 192.168.0.2:

Listen port --- protocol --- dest IP ------ dest port

NA--------------PPTP---------192.168.0.2-----NA

000-------------50-----------192.168.0.2-----0

500-------------UDP----------192.168.0.2-----500

24705-----------TCP----------192.168.0.2-----23

(This is so we can telnet to the cisco routers external interface in the event the tunnel is down.)

we also needed a route statmenmt on the win2k sys

route add -p 10.195.0.0 255.255.255.0 192.168.0.2

Those setting did in fact get my GRE tunnel up and functional.

I hope this solution may help someone else out there.