Hi there,
AH wont work with NAT....AH does a digest copmutation on the entire IP packet, including dest / src IP's. When this passes through NAT, the IP header changes, and thus the apcket will be dropped. BJ Rice wrote: > > To clarify, my PIX sits behind a DSL modem, not router. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63693&t=63638 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]