Chris The Cisco TAC website has a number of examples.
>From www.cisco.com Technical Support -> Technology Support -> Security & VPN -> IPSEC -> Samples and Tips Or just go to http://www.cisco.com/cgi-bin/Support/browse/psp_view.pl?p=Internetworking: IPSec&s=Implementation_and_Configuration#Samples_and_Tips (watch the wrap). You may need a cco login to get that far though. Then scroll down to IPSec on Router to ... By looking through a few of the router to router and router to pix examples you should be able to work it out. If I am reading your question right it basically comes down to putting in some deny statements into your NAT access-list that match your crypto map. Regards Peter --On 19 March 2003 22:18 +0000 Chris Penrose wrote: > Hi all, Can anyone help me with a problem I am having trying to create a > VPN on an 801 to a PIX firewall. I have other devices working fine but > the isdn router does not seem to want to encrypt the traffic I specified > in the access list. I have applied the cypto map to both the dialer and > the bri interface and I have read somewhere that the problem is to do > with the ios natting the traffic before it gets to the crypto statement. > Does anyone that has done this have any examples they could send me, as > I can't seem to find a relevant one on the cisco site :-/ > > Many thanks > > Chris > > This email and any attachments are confidential and intended solely for > the individual or organisation to which it is addressed. If you have > received this email or any attachments in error please notify us by email > or telephone +44 (0) 1872 279727 immediately. Please ensure no further > copies of this email > or attachments are distributed in any form and that all copies are > permanently > deleted from your systems. > > The contents of this email and any attachments shall be of no contractual > effect unless otherwise agreed between AC Systems (Danemove Ltd) and the > legitimate recipient. > > AC Systems > Danemove House > Newham Road > Truro > Cornwall > TR1 2DP > www.ac-systems.co.uk > Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65792&t=65782 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]