IPSec Through Firewall

[mike_jones]

I need to pass IPSec between two servers that are separated by our PIX 535. Can someone outline for me what needs to be configured for this to work properly?

[cpembleton]

If your running 6.3 or later you can use fixup protocol esp-ike. This allows only 1 computer to do ipsec pass through.

If you need more then 1 pc to pass ipsec traffic then you should look into NAT-T.

http://www.cisco.com/en/US/customer/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a008017278c.html#wp1057446

Thanks,

Chad