I have a working config now so you will be pleased to know that 6.3 can do NAT-T although as a point of note there is currently no pdm available for 6.3 ( except a fairly crippled beta) it is disable by default and can be enabled with the command isakmp nat-traversal
seems to work fine :-) Chris -----Original Message----- From: Steve Wilson [mailto:[EMAIL PROTECTED] Sent: 30 March 2003 21:21 To: [EMAIL PROTECTED] Subject: RE: PIX Nat Traversal / VPN [7:66404] Last time I looked you could not do NAT-T on a PIX with 6.3 software. Only VPN Gateways can handle it. Next gen of software should be able to do it sez the great god Cisco. I have been looking forward to this for some time as I install both PIX and VPN all the time. Cheers, Steve -----Original Message----- From: Chris Penrose To: [EMAIL PROTECTED] Sent: 28/03/2003 21:28 Subject: PIX Nat Traversal / VPN [7:66404] I have a requirement to configure a VPN tunnel on pix ver 6.3 using nat traversal. I am wondering if I need to use any special commands and which ports I need to forward from my router to the pix. I am assuming udp port 500. Has anyone done this that could give me some advice? regards Chris This email and any attachments are confidential and intended solely for the individual or organisation to which it is addressed. If you have received this email or any attachments in error please notify us by email or telephone +44 (0) 1872 279727 immediately. Please ensure no further copies of this email or attachments are distributed in any form and that all copies are permanently deleted from your systems. The contents of this email and any attachments shall be of no contractual effect unless otherwise agreed between AC Systems (Danemove Ltd) and the legitimate recipient. AC Systems Danemove House Newham Road Truro Cornwall TR1 2DP www.ac-systems.co.uk This email and any attachments are confidential and intended solely for the individual or organisation to which it is addressed. If you have received this email or any attachments in error please notify us by email or telephone +44 (0) 1872 279727 immediately. Please ensure no further copies of this email or attachments are distributed in any form and that all copies are permanently deleted from your systems. The contents of this email and any attachments shall be of no contractual effect unless otherwise agreed between AC Systems (Danemove Ltd) and the legitimate recipient. AC Systems Danemove House Newham Road Truro Cornwall TR1 2DP www.ac-systems.co.uk Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66511&t=66404 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]