problems with ESP and NAT under 12.4.4

Dec 03, 2005 0 Replies

Hi there.



I have recently upgraded a 12.3.11T 837 router to 12.4.4. Everything is working - apart from one thing.



It would seem that the ESP support for NAT is not working correctly - or I need to do something else.



in the NAT debug I am seeing:


*Jul 3 14:02:48: NAT: IPSec: cannot find In->Out ESP conn, OG=xx.xxxx.xxxx.169 IG=xx,xx,xx.189 SPI 0x268DEB97


I am guessing that OG = Outside Gateway, and IG = Inside gateway as this corresponds to the IP address's.


Rolling back the IOS - it works fine again.



Does anyone know of anything that I can do / any Ideas? I have tried the SPI matching nat service option but this does not seem to make any differance either.


Any help would be much appriciated.


Kind regards



Jon Paterson



Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required