eBGP through PIX Question #2 (static policy nat)

From: Lab Rat #109385382 (techlist01@gmail.com)
Date: Tue Dec 12 2006 - 02:31:29 ART

If I do a static policy NAT on the PIX between two eBGP speakers, can I
still authenticate them?

i.e.,

access-list R1R2 permit ip host 1.1.1.1 host 2.2.2.2 (r1 loop to r2 loop)

static (inside,outside) 2.2.2.1 access-list R1R2 norandomseq

It seems that the "norandomseq" is not working for me, because when I remove
the "neighbor password" command on each side, the peering establishes just
fine (otherwise, they stay stuck in ACTIVE).

Is "noradomseq" not supposed to work in a static policy-nat scenario?

Thanks,

Ed

This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART