isakmp nat-t support in sup720 images

[mflanigan]

Can anyone tell me what version of the 12.2 SX train has support for nat-t with ipsec/isakmp? The software tools are no help, and I haven't gotten very far with TAC. I am running 12.2(17d)SXB10, and am having trouble getting a netscreen to connect if it is behind nat. It works fine if no nat. From the isakmp debug, it looks like the MSFC recognizes NAT-T, but the 'crypto isakmp nat-transparency' command is not recognized. I need to know if my problem is release-related or an interoperability problem. Thanks

[sbilgi]

Also added in Cisco IOS Release 12.3(9a) and 12.3(11)T is the capability to have the hub DMVPN router behind static NAT. This was a change in the ISAKMP NAT-T support. For this functionality to be used, all the DMVPN spoke routers and hub routers must be upgraded, and IPSec must use transport mode