NAT-T on a VPN with an 837 router

[chicocouk]

Ok, I know this isn't the router forum, but i think there's a fair overlap of skillsets here. I need someone to confirm something one way or the other please.

I don't think a Cisco 837 router supports NAT-traversal (tunnelling ESP traffic under UDP port 4500), unlike the PIX, and the VPN concentrators and the VPN client software. They all do, but I don't think an 837 does.

Can someone confirm or deny this please?

If I'm wrong, could you point me towards some config on how to enable it? It may be relevant to point out that this is when using the 837 as an Easy VPN Remote (or client, whichever you want to call it)

Thanks!

Chico

CCNA, CCSA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP

 

[tschouten]

You need IOS 12.2(13)ZG or higher to perform NAT-T on an 837.

Hope that helps

Terry Schouten

 

[chicocouk]

Ahh, that's totally passed me by. Thanks

Ok, so how do you enable it? Looking at the documentation for the crypto commands for IOS 12.3 here;

http://www.cisco.com/en/US/products...ommand_reference_chapter09186a008017cf18.html

I'm not seeing anything relevant ... on a pix it would be

isakmp nat-traversal

but i guess that would be too easy?

Any help much appreciated

CCNA, CCSA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP