On Sun, Dec 25, 2011 at 10:36 PM, Kingsley Charles <
[email protected]> wrote:

> With NAT between KS and GM, GETVPN jumps to UDP port 4500. Between GMs, it
> will be ESP always, even if NAT is present in between.
>
> With regards
> Kings
>
>
> On Sun, Dec 25, 2011 at 9:55 PM, HA Ali <[email protected]> wrote:
>
>>  I have seen in cisco offical docs that GDOI works on 848 UDP and if
>> NAT-T is enabled it works on 4500 UDP . But in simple vpn setup ( not
>> getvpn ) we use 4500 for ESP .
>>
>>
>> If GETVPN uses ESP and GDOI how will it work in a NAT-T case ? will both
>> of them use UDP 4500
>>
>> ------------------------------
>> From: [email protected]
>> Date: Sun, 25 Dec 2011 16:42:43 +0100
>> To: [email protected]
>> CC: [email protected]
>> Subject: Re: [OSL | CCIE_Security] GETVPN and NAT
>>
>>
>> NAT-T is supported between GM and KS. NAT is not supported between GMs.
>> The only option is to NAT before encryption.
>>
>> Regards,
>> Piotr
>>
>>
>> 2011/12/25 waleed ' <[email protected]>
>>
>>  Dear all , in getvpn there is not nat-t becuase there is no isakmp
>> between the peers , so how get vpn work if there is nat between tow peers
>> ?
>>
>> _______________________________________________
>> For more information regarding industry leading CCIE Lab training, please
>> visit www.ipexpert.com
>>
>> Are you a CCNP or CCIE and looking for a job? Check out
>> www.PlatinumPlacement.com
>>
>>
>>
>> _______________________________________________ For more information
>> regarding industry leading CCIE Lab training, please visit
>> www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out
>> www.PlatinumPlacement.com
>>
>> _______________________________________________
>> For more information regarding industry leading CCIE Lab training, please
>> visit www.ipexpert.com
>>
>> Are you a CCNP or CCIE and looking for a job? Check out
>> www.PlatinumPlacement.com
>>
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to