Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,I've bought a 4215 IDS (2 interfaces) with the 4.1 image some years ago. I want to use it in inline mode. I will buy a 4FE card and an upgrade for the image to the latest version. My question is if there is any posibility to use a pair of inter...
Hello,Can anybody tell how much overhead will the ipsec and gre tunnel add? I need to correctly adjust the mss on a tunnel interface, in order to avoid the fragmentation. The transform set is: ah-sha-hmac esp-aes esp-sha-hmac.
Hello,Can anybody show two different configurations for the following situations?1. An ipsec tunnel over a gre tunnel2. A gre tunnel over an ipsec tunnelAnd other two simple questions:1. How can someone match the udp or tcp traffic with the access li...
Hello,Does anybody have an idea how to interconnect through ipsec to routers, one 1605R with ios c1600-sy56i-mz.120-14.bin (4MB Flash/16 MB RAM) and one 3745 with ios c3745-adventerprisek9-mz.123-16.bin 32 MB Flash/256 RAM)? As far as I know, there ...
Hello,I have the following situation: two sites are connected through an IP MPLS VPN. I want the two sites to be connected via an ipsec over gre tunnel. My problem is that I want the mtu to be 1500 B, in a transparent way to the applications. The SP ...
Thank you very much. I think I shall design another scenario. Maybe I shall use 2 separate interfaces for the inbound traffic (one for the tx and one for the rx), and 2 separate interfaces for the outbound traffic one for the tx and one for the rx), ...
Thank you very much. It helps me a lot to understand how the things work inside the IOS - how they are implemented. I use a 12.3(16) IOS and when I want to eliminate the "permit gre ..." from the access list, the traffic does not flow anymore (the tr...
Hi,Thank you very much, but there is no possibility to replace the 1605Rs with other routers, as they are part of a project implemented by another company for us. It seems that the newest ios that can fit into my flash is c1600-sy56i-mz.12.0-7.T2 (12...
