"J. Oquendo" <[EMAIL PROTECTED]> 10/18/07 7:40 PM GMT+2: > nonrandomseq is your friend
Last time I checked the "norandomseq" was something you applied to a nat/static statement to prevent the PIX/ASA from manipulating TCP sequence numbers when translating connections traversing the firewall. In this case, we're talking ESP, not TCP. And the connection is terminated on the firewall itself, not traversing the firewall. But friends are always welcome. :-) Regards, Peter Rathlev _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
