not easily.
here's the deal...i can use an access list such as...
acc 132 per icmp ho 135.7.1.3 ho 135.7.1.5 log
on the host 135.7.1.3 pointing to 135.7.1.5, and of course the mirror image
on the other side. all works fine with the pings, in that the first 5
time-out while the SA is built. after that the pings are successful. but
when i use the following...
acc 132 per gre ho 135.7.1.3 ho 135.7.1.5 log
the ipx pings never bring up the line. shouldn't the above acl cover gre
encapsulated packets?
>From: "Kenny Sallee" <[EMAIL PROTECTED]>
>To: "vr4drvr ." <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
>Subject: Re: gre/ipsec
>Date: Wed, 7 Jun 2000 13:59:57 -0700
>
>Can you post your configs?
>
>Kenny
>
>----- Original Message -----
>From: "vr4drvr ." <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Wednesday, June 07, 2000 11:32 AM
>Subject: gre/ipsec
>
>
> > i'm trying a simple GRE/IPSEC scenario that i can't seem to get to work.
> > i've built a tunnel between 2 router to pass ipx traffic, and for
>security
>i
> > would like to encrypt the tunnel traffic. my crypto map points to an
>access
> > list that allows gre traffic, but the crypto isakmp sa never builds.
>any
> > ideas?
> > ________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> >
> > ___________________________________
> > UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info: http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
>
________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
