[HECnet] Cisco tunnels: update my IP

[Cory Smelosky]

...it also exceeds the capabilities of a 2851.

Sent from my iPhone

> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net> wrote:
> 
> My connection exceeds the capabilities of the 2620 or I would.
> 
> Sent from my iPhone
> 
>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at Stupi.SE> wrote:
>> 
>> 
>> Why don't you put your 2600 as your boarder-gw? 
>> 
>> interface Tunnel1
>> ip address 192.108.195.70 255.255.255.252
>> ip router isis
>> ipv6 address 2001:440:1880:ABCD::2/64
>> ipv6 enable
>> ipv6 mtu 1420
>> ipv6 router isis
>> decnet cost 1
>> isis metric 2
>> tunnel source ATM0/1/0.1
>> tunnel destination 192.36.147.120
>> !
>> interface ATM0/1/0
>> mtu 4470
>> no ip address
>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>> load-interval 30
>> atm restart timer 90
>> no atm ilmi-keepalive
>> dsl enable-training-log delay 0
>> dsl power-cutback 6
>> dsl noise-margin -2
>> dsl gain-setting rx-offset 3
>> dsl bitswap both
>> !
>> interface ATM0/1/0.1 point-to-point
>> mtu 4470
>> ip dhcp client broadcast-flag set
>> ip address dhcp
>> ip nat outside
>> ip virtual-reassembly in
>> atm route-bridged ip
>> pvc 0/35
>> protocol bridge
>> encapsulation aal5snap
>> 
>> -P
>> 
>> 
>> 
>> 
>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>> Found the actual problem!
>>>> 
>>>> IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from the DECnet tunnel IPs to a separate box as is currently configured.
>>>> 
>>> 
>>> So, does this mean that you're still off the air?
>>> 
>>> Regards, Tim.
>>> 
>>> 
>> 
>> `
>