Re: vpn client termination on router, with split-tunnel [7:75147]

2003-09-09 Thread nrf
Sure You will need to be running IOS 12.2(8)T or above. ""bk"" wrote in message news:[EMAIL PROTECTED] > Hello all, > > I am trying to terminate a vpn tunnel on a 3640 for clients (4.x). I > have done it on a pix with split-tunnel. Can the 3640 be setup to &g

vpn client termination on router, with split-tunnel [7:75134]

2003-09-09 Thread bk
Hello all, I am trying to terminate a vpn tunnel on a 3640 for clients (4.x). I have done it on a pix with split-tunnel. Can the 3640 be setup to perform split-tunnel? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=75134&

RE: GRE Tunnel Recursive Routing Error [7:74035]

2003-08-19 Thread Doan Nguyen
You're getting a race condition because you're injecting the tunnel's ip address into your control plane routing. Your tunnel protocol is using your routing to transfer payload from one end to another. However when you use the ip address of the tunnel and injecting it into your r

Re: GRE Tunnel Recursive Routing Error [7:74035]

2003-08-17 Thread Dain Deutschman
I would think security point of view...there would be better solutions...however...this is just a lab scenario. Thanks so much for your help though. I see the problem now and changed the static route to point to tunnel destination. Thanks! Dain ""Zsombor Papp"" wrote in

RE: GRE Tunnel Recursive Routing Error [7:74035]

2003-08-16 Thread Georgescu, Aurelian
On r2 use a Loopback interface to terminate the tunnel Aurelian Georgescu -Original Message- From: Dain Deutschman [mailto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2003 12:11 AM To: [EMAIL PROTECTED] Subject: GRE Tunnel Recursive Routing Error [7:74035] Hi all, I'm gett

RE: GRE Tunnel Recursive Routing Error [7:74035]

2003-08-16 Thread Zsombor Papp
r1 (bb2) learns the route to the destination of the GRE tunnel, 150.50.22.2, via that same GRE tunnel. Add a static route like this to r1's configuration: ip route 150.50.22.2 255.255.255.255 Ethernet0 As a side note, is this (GRE tunnel through the PIX) a good design from the security poi

GRE Tunnel Recursive Routing Error [7:74035]

2003-08-15 Thread Dain Deutschman
Hi all, I'm getting a "recursive routing" error when trying to tunnel with gre. r1-pix-r2 The error follows along with my configs and route tables. Thanks! 00:52:21: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to down bb2# 00:53:21: %LIN

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-24 Thread Luan Nguyen
x27;t have that route any longer. Okay, to the main topic - I run 12.3.1 on a 7206VXR and I could configure bridge-group on the tunnel interface. interface Tunnel10 bandwidth 1500 ip unnumbered Loopback1 ip mtu 1440 ip hello-interval eigrp 2002 10 ip hold-time eigrp 2002 40 keepalive 10 4 t

Re: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread
r rely on this email, and should immediately delete it from your computer. > > > -Original Message- > From: Luan Nguyen [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 23, 2003 8:50 AM > To: 'Reimer, Fred' > Subject: RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread Ricardo J Castaneda
When I first triggered this question, certainly I took advantage of having a forum full of creative techie people. Why would I need to bridge 2 LANs, separated from a couple of routers or so, using a tunnel? Well, that question, indeed, came from one of our customers, and then my coming to think

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread John Neiberger
If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Luan Nguyen [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 23, 2003 8:50 AM To: 'Reimer,

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread Luan Nguyen
x27;t have that route any longer. Okay, to the main topic - I run 12.3.1 on a 7206VXR and I could configure bridge-group on the tunnel interface. interface Tunnel10 bandwidth 1500 ip unnumbered Loopback1 ip mtu 1440 ip hello-interval eigrp 2002 10 ip hold-time eigrp 2002 40 keepalive 10 4 t

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread Reimer, Fred
Ah O.K. My apologies then. It slipped my mind that there is a separate group for the CCIE lab and that this was more of a general group. Sorry for the inappropriate post. The question is still out there though, although it may me possible to configure a bridge-group on a tunnel interface in

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread Reimer, Fred
y, July 23, 2003 8:50 AM To: 'Reimer, Fred' Subject: RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738] Hello, I was just trying to suggest maybe put the command bridge-group there to see if 12.2.15T5 takes it or not - whether that will work...etc, is a different story - just for informat

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread Luan Nguyen
Hello, Didn't mean anything - just some information in case you guys not just study but doing work for your company also. And like John said, I was curious to see if you could do broadcast over the tunnel since when talk about GRE, mostly it could implement multicast and not a mention of broa

Re: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-23 Thread John Neiberger
ed at the moment to try it out, though. John - Original Message - From: "Reimer, Fred" To: Sent: Tuesday, July 22, 2003 9:29 PM Subject: RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738] > 12.2(15)T5 is a recommended version for the IP v4 exploit, as far as I know, > see

Re: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread
sclose, distribute, copy, print > or rely on this email, and should immediately delete it from your computer. > > > -Original Message- > From: Reimer, Fred > Sent: Tuesday, July 22, 2003 11:30 PM > To: Luan Nguyen; 'Reimer, Fred'; [EMAIL PROTECTED] > Subject: RE:

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Reimer, Fred
003 11:30 PM To: Luan Nguyen; 'Reimer, Fred'; [EMAIL PROTECTED] Subject: RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738] 12.2(15)T5 is a recommended version for the IP v4 exploit, as far as I know, see (http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml). Are you

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Reimer, Fred
lto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 10:02 PM To: 'Reimer, Fred'; [EMAIL PROTECTED] Subject: RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738] Uhm, Why don't you just put the command there and see what's going on. I don't mess with 12.2.15Tx any more since

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Luan Nguyen
x27;t have that route any longer. Okay, to the main topic - I run 12.3.1 on a 7206VXR and I could configure bridge-group on the tunnel interface. interface Tunnel10 bandwidth 1500 ip unnumbered Loopback1 ip mtu 1440 ip hello-interval eigrp 2002 10 ip hold-time eigrp 2002 40 keepalive 10 4 t

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Reimer, Fred
Wow, I hope you don't try that on your CCIE lab! Last I heard, bridging was not supported on tunnel interfaces. At least it's not on the 12.2(15)T5 running on a 2651XM router I just tested. If you find a (recent, supported) version of IOS that supports "bridge-group" i

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Reimer, Fred
The client may not have control over the cloud in the center, and the cloud may only support TCP/IP. The only solution would be to properly route the supported protocol in the tunnel interface (Tunnel interfaces support AppleTalk, Banyan VINES, CLNS, DECnet, IP, or IPX), or use DLSW if SNA and/or

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Luan Nguyen
Uhm. Never done this or heard of this before. I would just do something like: Interface LAN 1 Bridge-group 1 Interface tunnel 1 Source WAN Destination REMOTE_WAN Bridge-group 1 Since, concurrent routing and bridging makes it possible to both route and bridge a specific protocol on separate

RE: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Priscilla Oppenheimer
idging? That would be easier. :-) > > Since I haven't done it before, I kind of thought that it'll be > possible. For instance, having: > > R1eth0(no ip address)--GRE > TUNNEL-Ser0--CLOUD--GRE_TUNN--Ser1---R2eth0(no ip address) > , where arp packets may flow from R1 t

Re: GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread John Neiberger
haven't done it before, I kind of thought that it'll be possible. >For instance, having: > >R1eth0(no ip address)--GRE TUNNEL-Ser0--CLOUD--GRE_TUNN--Ser1---R2eth0(no ip >address) > , where arp packets may flow from R1 to R2 via this GRE Tunnel. > >Under this scenari

GRE TUNNEL/Ethernet-broadcast-like? [7:72738]

2003-07-22 Thread Ricardo J Castaneda
aving: R1eth0(no ip address)--GRE TUNNEL-Ser0--CLOUD--GRE_TUNN--Ser1---R2eth0(no ip address) , where arp packets may flow from R1 to R2 via this GRE Tunnel. Under this scenario and simply put, can R1'sLAN be also part of R2'sLAN? If it's possible, how could the config be like? Best

GRE Tunnel & EIGRP [7:72093]

2003-07-10 Thread Tim Champion
I am planning on using a GRE tunnel across a MPLS VPN in order to create an EIGRP neighbour relationship across the cloud. The VPN link will be running at 8Mbps. The routers terminating the tunnel will be a 3640 and RSM. Does anyone know if this will adversely impact the processors and/or

Re: virtual-links over tunnel [7:71119]

2003-06-24 Thread Nikolay Abromov
sorry i asked wrong quastion, what is advantages of tunnel than virtual-links in ospf. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=71229&t=71119 -- FAQ, list archives, and subscription info: http://www.groups

Re: virtual-links over tunnel [7:71119]

2003-06-23 Thread jountao
i actually have not tried this, but, if u configure a tunnel, u don't need a virtual link, since ur tunnel will up to the backbone, in which case direct adjencency of the areas, but since i have not tried this, i don't know if it works. ""Nikolay Abromov"" a icrit d

virtual-links over tunnel [7:71119]

2003-06-23 Thread Nikolay Abromov
i've very simple quastion, it's there any advantages to useing tunnel than virtual-links in ospf network expect that tunnel can use trought stub areas? thanks in advance. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i

Re: Tunnel interface Problem [7:70590]

2003-06-13 Thread Thomas Crowe
Try this URL pad pad pad http://www.cisco.com/en/US/customer/tech/tk827/tk369/tech_protocol_family_home.html Skarphedinsson Arni V. wrote: > Hi all > > I am trying to bring up a tunnel interface, I get up and up, but the > folowing statement is shown when i do a show int tunnel

Re: Tunnel interface Problem [7:70590]

2003-06-13 Thread Skarphedinsson Arni V.
I will post the config, as soon as I am able, but I have a route on both sides, and can ping, Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=70621&t=70590 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list

RE: Tunnel interface Problem [7:70590]

2003-06-12 Thread Georgescu, Aurelian
You should have a route between the source and the destination of the tunnel. You must be able to ping them before you can set up the tunnel. Aurelian Georgescu -Original Message- From: Skarphedinsson Arni V. [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2003 12:08 PM To: [EMAIL

Re: Tunnel interface Problem [7:70590]

2003-06-12 Thread Thomas Crowe
If you could post your configuration, it would be a lot easier for us to help you troubleshoot the problem. Skarphedinsson Arni V. wrote: > Hi all > > I am trying to bring up a tunnel interface, I get up and up, but the > folowing statement is shown when i do a show int tunnel

Tunnel interface Problem [7:70590]

2003-06-12 Thread Skarphedinsson Arni V.
Hi all I am trying to bring up a tunnel interface, I get up and up, but the folowing statement is shown when i do a show int tunnel Tunnel protocol/transport uninitialized and I can not get any traffic to flow through the tunnel, any thoughts ? Message Posted at: http://www.groupstudy.com

LLQ Modular QoS on VPN/Tunnel/or POS [7:69792]

2003-05-30 Thread Jennifer Mellone
All, I'd try this myself if I had a router at my fingertips... 1. I'd like to apply LLQ for my VoIP traffic over a site to site VPN using Cisco's Modular QoS technique. Will the router "bark" if I try to apply my output service policy to the tunnel interface? Or do

Re: Anyone configured nat under tunnel [7:65843]

2003-03-20 Thread nrf
""Ben W"" wrote in message news:[EMAIL PROTECTED] > The problem with doing standby track tunnel is quite often, the tunnel > interface doesn't go down. I had the same question awhile back when I was > configuring HSRP and i found out that the tunnel interface

RE: Anyone configured nat under tunnel [7:65843]

2003-03-20 Thread Ben W
The problem with doing standby track tunnel is quite often, the tunnel interface doesn't go down. I had the same question awhile back when I was configuring HSRP and i found out that the tunnel interfaces would stay up, up, even though traffic stopped routing through it for one reason or an

Anyone configured nat under tunnel [7:65843]

2003-03-20 Thread Karim Abdelmonem
Anyone configured NAT under tunnel interface (GRE tunnel)?? Also anyone knows if i can use standby track tunnel (HSRP track interface command)?? Thanks, Karim. _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http

Re: Split-Tunnel with PPTP on PIX [7:64585]

2003-03-08 Thread Darrell Newcomb
dialup software will insert a classful route for the prefix of the newly installed dialup interface. So for your example lets say your PPTP tunnel is addressed with 192.168.1.100, then the MS dialup software has frequently installed a 192.168.0.0/16 route. If you are lucky enough to have your inte

Re: Forwarding UDP broadcast over GRE Tunnel. [7:64647]

2003-03-07 Thread Amar KHELIFI
1. So this feed needs to go over internet. If I put a > 2500 router on each network, could I create a GRE tunnel and forward the UDP > broadcasts from Network A to network B? Lets assume the application takes > care of the reliability problem posed by UDP. > > > > /---

NAT + VPN Tunnel [7:64731]

2003-03-07 Thread Skarphedinsson Arni V.
In the following secnaryo should there be any problems for the hosts on the inside of router1 to connect to the hosts on the otherside of the VPN tunnel inside networkrouter1router2internet inside of router1 are RFC1918 addresses are used router1 is doing NAT in between the router is

Forwarding UDP broadcast over GRE Tunnel. [7:64647]

2003-03-06 Thread Sam Sneed
ients on network B that need to get these broadcasts. I can't afford a dedicated link like a t1. So this feed needs to go over internet. If I put a 2500 router on each network, could I create a GRE tunnel and forward the UDP broadcasts from Network A to network B? Lets assume the application tak

forwarding udp broadcast over GRE tunnel [7:64654]

2003-03-06 Thread Sam Sneed
ients on network B that need to get these broadcasts. I can't afford a dedicated link like a t1. So this feed needs to go over internet. If I put a 2500 router on each network, could I create a GRE tunnel and forward the UDP broadcasts from Network A to network B? Lets assume the application tak

Split-Tunnel with PPTP on PIX [7:64585]

2003-03-06 Thread Arni V. Skarphedinsson
I there a way to do split-tunneling for vpn clients connecting to a pix with pptp so that they donĀ“t lose internet conectivity, the clients are using the microsoft vpn dialar. any examples of this would be great. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64585&t=64585

Re: GRE Tunnel [7:62235]

2003-02-03 Thread The Long and Winding Road
P,IPXWAN,IPX Addressing, GNS) http://www.cisco.com/warp/public/625/ccie/ccie_program/whatsnew.html#18 > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > The Long and Winding Road > Sent: Monday, February 03, 2003 11:14 PM >

RE: GRE Tunnel [7:62235]

2003-02-03 Thread Juan Blanco
Long and Winding Road Sent: Monday, February 03, 2003 11:14 PM To: [EMAIL PROTECTED] Subject: Re: GRE Tunnel [7:62235] -- TANSTAAFL "there ain't no such thing as a free lunch" ""Bruno Fernandes"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTE

Re: GRE Tunnel [7:62235]

2003-02-03 Thread The Long and Winding Road
-- TANSTAAFL "there ain't no such thing as a free lunch" ""Bruno Fernandes"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi again, > > I already tried to give the command in the tunnel interface but the > bridge-group com

Re: GRE Tunnel [7:62235]

2003-02-03 Thread Bruno Fernandes
Hi again, I already tried to give the command in the tunnel interface but the bridge-group command simply isn't there, I am doing this in 2600 router, with an enterprise image. Any comments Thanks in advance, Bruno Fernandes ""The Long and Winding Road"" wrote in m

RE: Cisco IPSec Tunnel Lifetime [7:62374]

2003-02-03 Thread mjans001
bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Leo Song Verzonden: maandag 3 februari 2003 21:33 Aan: [EMAIL PROTECTED] Onderwerp: Cisco IPSec Tunnel Lifetime [7:62374] Hi, Is it possible to configure the IPSec tunnel never expired on Cisco PIX? A little bit weird, and we got

Cisco IPSec Tunnel Lifetime [7:62374]

2003-02-03 Thread Leo Song
Hi, Is it possible to configure the IPSec tunnel never expired on Cisco PIX? A little bit weird, and we got such interesting request. Thanks. Leo Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62374&t=62374 -- F

RE: Working - Finallly !!! RE: IPSec over Tunnel [7:62260]

2003-02-01 Thread Cisco Nuts
It's exactly as I have in my email earlier. The only thing that I changed was: #remove access-list 102 -not needed as ospf and other ip traffic is inside the tunnel #change access-list 199 referenced in the cryptomap: RTA# serial ip = 120.20.26.2 255.255.255.0 tunnel ip = 120.20

Re: GRE Tunnel [7:62235]

2003-01-31 Thread The Long and Winding Road
""Bruno Fernandes"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Good morning !!! > > Is it possible to a Tunnel Interface to belong to a Bridge-Group ? yes > If yes, how ? same as with any other interface - enter the appropriate br

Working - Finallly !!! RE: IPSec over Tunnel [7:62260]

2003-01-31 Thread Cisco Nuts
YES It finally worked!! I had to permit the tunnel ip of the other side(A) to the serial ip on this side(B) for gre and vice versa on the other side. Thank you very much for your help. This gives me great confidence to surge forward regarding tackling route

RE: IPSec over Tunnel - not working !! [7:62124]

2003-01-31 Thread [EMAIL PROTECTED]
0.59.0 255.255.255.0 yyy.yyy.yyy.yyy 255.255.255.0, where yyy is the address of the remote tunnel. This way you are telling the router to IPSEC the gre traffic sourced by the tunnel, destinated to the remote tunnel. The OSPF traffic will be inside the tunnel, so IPSEC will

GRE Tunnel [7:62235]

2003-01-31 Thread Bruno Fernandes
Good morning !!! Is it possible to a Tunnel Interface to belong to a Bridge-Group ? If yes, how ? Regards, Bruno Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62235&t=62235 -- FAQ, list archives, and subscription in

Re: MTU size for IPSec+GRE tunnel [7:62161]

2003-01-30 Thread [EMAIL PROTECTED]
th my education." "Thomas N." To: [EMAIL PROTECTED] Sent by: cc: nobody@groupstudySubject: MTU size for IPSec+GRE tunnel [7:621

RE: IPSec over Tunnel - not working !! [7:62124]

2003-01-30 Thread Cisco Nuts
Hello Claudio, No luck.I denied the tunnel intf. itself in the access-list and still same problem. The ospf neighbor relation goes down... R6-C#sh access-lists 199 Extended IP access list 199 deny ip 120.20.59.0 0.0.0.255 120.20.59.0 0.0.0.255 permit ip 120.20.0.0 0.0.255.55

MTU size for IPSec+GRE tunnel [7:62161]

2003-01-29 Thread Thomas N.
Hi All, I am trying to avoid fragmentation of packets across the IPSec+GRE tunnel with "transform-set" using "ah-sha-hmac" AND "esp-3des" for header authentication and payload encryption. What size of MTU or "TCP addjust-MSS" should I use for maximum per

Re: IPSec over Tunnel - not working !! [7:62124]

2003-01-29 Thread jose
multicast traffic cannot be "normally" be encrypted, that is the reason to use a GRE tunnel and then encrypt GRE traffic Cheers, Jose ""Claudio Spescha"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello > > You should not encry

RE: IPSec over Tunnel - not working !! [7:62124]

2003-01-29 Thread Claudio Spescha
Hello You should not encrypt the tunnel network itself. First line of access-list 199 should be: access-list 199 deny ip 120.20.59.0 0.0.0.255 120.20.59.0 0.0.0.255 The router can not build an OSPF adjacency on encrypted traffic. see you Claudio Message Posted at: http://www.groupstudy.com

Re: IPSec tunnel [7:62125]

2003-01-29 Thread Cisco Nuts
The 2600 and the 3600 are fine. But you would need the Enterprise Feature Set >From: "Marcel Janssen" >Reply-To: "Marcel Janssen" >To: [EMAIL PROTECTED] >Subject: IPSec tunnel [7:62125] >Date: Wed, 29 Jan 2003 19:23:45 GMT > >Hi, > >we are plann

IPSec tunnel [7:62125]

2003-01-29 Thread Marcel Janssen
Hi, we are planning to use Cisco routers between our main site and two remote sites with an IPSec tunnel using 3DES encryption and certificates for authentication. Can someone tell me what Cisco hw platform and IOS sw I need with 2 IPSec tunnels ending in one router

IPSec over Tunnel - not working !! [7:62124]

2003-01-29 Thread Cisco Nuts
Hello,I have 2 routers, R2R6 connected via serial netw. 120.20.26.0/24Ospf Area 0 is on R2, netw. 120.20.234.0/27Isis on lo0 on R2 (2.2.2.2/24) and on the serials between the 2 routersOspf Area 3 on R6, netws. 120.20.60.0/24 and lo0, 6.6.6.6/24 Created a tunnel on R2 and R6 to connect area 3 to

RE: Hov to translate address on VPN tunnel [7:60500]

2003-01-07 Thread Kim Graham
If you have version 6.2 you can use the "nat outside" command. This command does exactly what you are asking. It allows for networks that have the same addressing scheme to connect to each other without having to do any re-addressing. I have included some links from CCO. If you do not have an

Hov to translate address on VPN tunnel [7:60500]

2003-01-07 Thread [EMAIL PROTECTED]
Hello everybody, My question is: Can I terminate IPSec VPN tunnel on PIX and translate my addresses to net on second end of tunnel together? I have got two networks with IP address schema 10.x.x.x and I have to link them via Internet. An access firewall is PIX on first and second net. I don&#

Frame-Relay Switching and Tunnel interface [7:58798]

2002-12-09 Thread Jefferson Orsi Siratuti
Hello, I'm have 2 Cisco 2501, and I need configure them as Frame-Relay Switching, but this model has only 2 Serial interfaces, so I get some configuration examples that explain how configure Frame-Relay switching on a Tunnel using the Ethernet Interface, but some commands of this configur

Re: IPX GRE tunnel for client??? [7:58146]

2002-11-26 Thread The Long and Winding Road
""Edward Sohn"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > anyone know if there is a way to "tunnel" single, > remote users over an IPX network? > > i have a manager who moves to different remote sites, > but doesn't

IPX GRE tunnel for client??? [7:58146]

2002-11-26 Thread Edward Sohn
anyone know if there is a way to "tunnel" single, remote users over an IPX network? i have a manager who moves to different remote sites, but doesn't want to change his IPX network address. is there a VPN (GRE) client or something of the sort that will allow for this? i'm

RE: Hub-Spoke VPN tunnel problem [7:58114]

2002-11-26 Thread Lidiya White
EMAIL PROTECTED]]On Behalf Of Karaoghlanian, Hagop Sent: Tuesday, November 26, 2002 10:51 AM To: [EMAIL PROTECTED] Subject: Hub-Spoke VPN tunnel problem [7:58114] Hello gentelmen, Heres my problem. I have - Hub | |

Hub-Spoke VPN tunnel problem [7:58114]

2002-11-26 Thread Karaoghlanian, Hagop
Hello gentelmen, Heres my problem. I have - Hub | | spoke | |-- ||LAN address 192.100.70.1 LAN addr

Re: VPN tunnel question [7:57994]

2002-11-24 Thread Stephane Litkowski
Yes it is possible, I used this architecture at home with OSPF on the GRE tunnel and it works fine ! ""supernet"" a icrit dans le message de news: [EMAIL PROTECTED] > RouterA---Internet--PIX-RouterB. I want to establish VPN > between RouterA and PIX and

VPN tunnel question [7:57994]

2002-11-24 Thread supernet
RouterA---Internet--PIX-RouterB. I want to establish VPN between RouterA and PIX and build a GRE tunnel between RouterA and RouterB. The reason is I need to run routing protocol between RouterA and RouterB. Is it possible? Many thanks. Message Posted at: http

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-03 Thread nettable_walker
gt; > Favor responder a "Richard Deal" > > Enviado Por: [EMAIL PROTECTED] > > > Para: [EMAIL PROTECTED] > cc: > > Assunto:Re: VPN tunnel with IPSec over GRE [7:54634] > > > It's probably an MTU problem. > > I have an IPSec connection bein

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-02 Thread Thomas N.
firmation! I used extended ping with DF bit set > as > > Richarde mentioned and found out that the packet size that can fit into > the > > tunnel without fragmentation is much less than 1500 bytes. I also went > over > > couple white papers from Cisco website. They mentio

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-02 Thread sam sneed
quot; wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Thank you All for the confirmation! I used extended ping with DF bit set as > Richarde mentioned and found out that the packet size that can fit into the > tunnel without fragmentation is much less than 1500 byte

RE: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Haakon Claassen (hclaasse)
Cisco Systems De Kleetlaan 6b - Pegasus Park B-1831 Diegem (Belgium) -Original Message- From: Thomas N. [mailto:[EMAIL PROTECTED]] Sent: woensdag 2 oktober 2002 3:40 To: [EMAIL PROTECTED] Subject: Re: VPN tunnel with IPSec over GRE [7:54634] Thank you

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Thomas N.
Thank you All for the confirmation! I used extended ping with DF bit set as Richarde mentioned and found out that the packet size that can fit into the tunnel without fragmentation is much less than 1500 bytes. I also went over couple white papers from Cisco website. They mentions about using

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Ben W
I too have seen these issues with VPN before, but unfortunately changing the MTU did not help for me. Robert Raver wrote: > > Everybody, > > I would have to agree with Chuck. I work on TAC for there VPN > support and > deal with these issues everyday. If the tunnel est

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Robert Raver
Everybody, I would have to agree with Chuck. I work on TAC for there VPN support and deal with these issues everyday. If the tunnel establishes and the traffic does not pass then look at the MTU. MTU can cause a lot of problems Thanks, Robert Raver Cisco Systems Inc. [EMAIL PROTECTED

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Chuck's Long Road
VPN. We tunneled IPX through a GRE tunnel with IPSEC 3DES. Connectivity was fine. I saw all routes. We could ping the routers throughout the network ( IP was enabled on all routers for remote management ) I saw all IP routes and all IPX routes. IPX pings and IP pings router to router worked fine

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread [EMAIL PROTECTED]
Assunto:Re: VPN tunnel with IPSec over GRE [7:54634] It's probably an MTU problem. I have an IPSec connection being tunneled via GRE, which in turn, is tunneled by another IPSec connection. Don't ask why I'm doing this :-) But we had to set the MTU down to 1320 to prevent fragment

Re: VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Richard Deal
tting up a site-to-site VPN between 2 LANs using Cisco IOS VPN (Cisco > 2600 routers). I could get the tunnel up and running between the two LANs > with IPSec over GRE so that I can run EIGRP. Data transfer between 2 LANs > across the tunnel looks OK, and all dynamic routes learned with EIG

VPN tunnel with IPSec over GRE [7:54634]

2002-10-01 Thread Thomas N.
Hi All, I am setting up a site-to-site VPN between 2 LANs using Cisco IOS VPN (Cisco 2600 routers). I could get the tunnel up and running between the two LANs with IPSec over GRE so that I can run EIGRP. Data transfer between 2 LANs across the tunnel looks OK, and all dynamic routes learned

Re: CISCO COMMAND CALLED "Tunnel" [7:52526]

2002-09-02 Thread Chuck's Long Road
;"Eng. ABDALLAH QUQAS"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Dear ALL, > > I was looking for help on cisco router using the "?" command, i found a > command called "tunnel", anybody explain the using of that comma

Ref: CISCO COMMAND CALLED "Tunnel" [7:52526]

2002-09-02 Thread Eng. ABDALLAH QUQAS
Dear ALL, I was looking for help on cisco router using the "?" command, i found a command called "tunnel", anybody explain the using of that command by an examples. Regards Message Posted at: http://www.groupstudy.com/form/read.php

Re: PPTP VPN Tunnel [7:52232]

2002-09-01 Thread nrf
What exactly do you mean by "non-Cisco VPN"? It's not like Cisco owns the spec's to IPSEC either. ""Sites, Bob"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Can anyone relate any pro/con's of creating a PPTP VPN Tu

PPTP VPN Tunnel [7:52232]

2002-08-28 Thread Sites, Bob
Can anyone relate any pro/con's of creating a PPTP VPN Tunnel through a Pix 515? I asked the TAC about this and below are the 3 commands they say I need. It would be point-to-point via IP address from inside to a location on the internet. I'm a little leary of using a Non-Cisco VPN

FW: TUNNEL CONNECTION [7:52068]

2002-08-26 Thread BlackboxVN
Hi, Try to use GRE tunnel, there is an example of our LAB which transports IPX over IP tunnel: IP TUNNEL LAB = OSPF AREA 0 ISP_A 10.0.0.4/30 ISP_B (X)---(X

Ref: TUNNEL CONNECTION [7:52068]

2002-08-26 Thread Eng. ABDALLAH QUQAS
Dear ALL, How can I implement a tunneling connection between two routers (Cisco 3600) through already established leased line connection (serial line) which has HDLC encapsulation up and running. and how clients workstation contact the other side through that tunnel. Kind Regards abd quqas

Re: PPTP Tunnel [7:51873]

2002-08-21 Thread nrf
I've done it with NT4 and 2000. I've never tried it with XP, but I don't see why it wouldn't work. ""Manny"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hello all, > > Is it possible to use the windows XP

PPTP Tunnel [7:51873]

2002-08-21 Thread Manny
Hello all, Is it possible to use the windows XP built in VPN client to establish a tunnel with the PIX? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=51873&t=51873 -- FAQ, list archives, and subscription in

Re: OSPF GRE tunnel to connect areas. [7:50633]

2002-08-04 Thread cannonr
Timothy, I don't think you will be able to form a neighbor relationship through the tunnel with that configuration. What I would do is put the tunnel interface on both sides in the same network rather than using unnumbered. Also, you would need to add the tunnel network into the OSPF pr

Re: OSPF GRE tunnel to connect areas. [7:50579]

2002-08-03 Thread Daniel Thiffeault
Hello, if there is one thing that i do at the very very end, that's the configuration of password on ospf, bgp, ntp and ... name it. I try it first without password and if it works i then apply the password. The problem should be split in small blocks, configuration of the tunnel bein

Re: OSPF GRE tunnel to connect areas. [7:50579]

2002-08-03 Thread [EMAIL PROTECTED] (Timothy Ouellette)
it's working. Had a couple of issues. First off, forgot to put my area 0 authentication on the tunnel. I also had my tunnel source/destinations mixed up Does anyone have any good notes they've taken on Tunnels? below is the config for r2 interface Tunnel1 ip address 1

OSPF GRE tunnel to connect areas. [7:50579]

2002-08-03 Thread Timothy Ouellette
network it needs a virtual link beween r2 and r5. I did that and it worked. What i'm trying to do now is a GRE tunnel between r2 and r5. The tunnel is up but r1 never sees the routers that it did when the virtual-link was up. The tunnel interfaces show up can I ping the loopback on r5 f

RE: VPN Tunnel through the PIX [7:50417]

2002-08-02 Thread Silju Pillai
HI Fabil, Its very difficult to explain unless you give the exact scenario.Normally you configure an access list for the VPN traffic and deny the NATing using "nat (inside) 0 access-list " command. Try the below link. You will find all the configurations there. http://www.cisco.com/pcgi-bin/Sup

VPN Tunnel through the PIX [7:50417]

2002-08-01 Thread [EMAIL PROTECTED]
Hello people, Any of guys know how to configure the pix 501 to allow for a vpn tunnel. I'm running PAT and trying to VPN to my corp site, no luck. Any assistance would be great. Thanks...Nabil "I have never let my schooling interfere with my education." Message

RE: IPSec to the tunnel endpoint withr IP unnumbered interface [7:47642]

2002-06-27 Thread Mark Odette II
iously not an expert. You may want to open a TAC case for assistance. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Firesox Sent: Thursday, June 27, 2002 9:09 PM To: [EMAIL PROTECTED] Subject: IPSec to the tunnel endpoint withr IP unnumbered interface [7:4

IPSec to the tunnel endpoint withr IP unnumbered interface [7:47622]

2002-06-27 Thread Firesox
Folks, I need some help with site to site vpn between 2610 and Avaya VPNet. Avaya VPnet is configured correctly with appropriate SA and tunnel endpoint. I have a router configured as follows. Ethernet Inetrface has the public IP address assigned to it. Serial 0/0 is an Frame interface to the

  1   2   3   >