New Cisco PIX 501, can I get it to do GRE and how? Need help ASAP

[atlantian2004]

I have a new PIX 501 for a VPN test, the connection I am going into uses ipsec for unicast and GRE for multicast, they neglegted to tell me this until I got the pix 501, so I grabbed a 2620 router which did not come with a 10/100 wan port as I had requested, and I need to get this up ASAP. So, being a Juniper/Netscreen guy, I am not familiar with the PIX. Can the 501 do GRE beyond just passing it? And if so, how do I set it up for the 501 to do the ipsec and GRE without the router?

 

[Supergrrover]

GRE can't terminate on a pix. It can pass through if you have a router -pix -world- pix- router and the GRE is from router to router.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml

With 7.x (not avail for the 501) you can have the router pass OSPF info from pix to pix, but that is it for multicast that I know of.

http://www.cisco.com/en/US/products...s_configuration_example09186a00804acfea.shtml

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[atlantian2004]

So on my end, would I configure the pix then put the router in frnt of it just for the GRE, or would I go router-pix, at which point I figure I can just forget about the pix. Ok, so the issue here is that I have a base 2620 with no modules, what module do I need for a ethernet connection (using DSL with a staic IP) or what would the cheapest router be that I can get that supports an ethernet wan interface and does GRE?

It has been a long time since I have used cisco gear,

 

[atlantian2004]

ops I meant dsl modem-->pix--router/ or /dsl modem -->roter-->pix?