On Jun 23, 2016, at 07:26, Cory Smelosky <b4
at gewt.net> wrote:
 
 My connection exceeds the capabilities of the 2620 or I would.
 
 Sent from my iPhone
 
  On Jun 23, 2016, at 05:30, Peter Lothberg
<roll at Stupi.SE> wrote:
 
 
 Why don't you put your 2600 as your boarder-gw? 
 
 interface Tunnel1
 ip address 192.108.195.70 255.255.255.252
 ip router isis
 ipv6 address 2001:440:1880:ABCD::2/64
 ipv6 enable
 ipv6 mtu 1420
 ipv6 router isis
 decnet cost 1
 isis metric 2
 tunnel source ATM0/1/0.1
 tunnel destination 192.36.147.120
 !
 interface ATM0/1/0
 mtu 4470
 no ip address
 ip virtual-reassembly in max-fragments 64 max-reassemblies 512
 load-interval 30
 atm restart timer 90
 no atm ilmi-keepalive
 dsl enable-training-log delay 0
 dsl power-cutback 6
 dsl noise-margin -2
 dsl gain-setting rx-offset 3
 dsl bitswap both
 !
 interface ATM0/1/0.1 point-to-point
 mtu 4470
 ip dhcp client broadcast-flag set
 ip address dhcp
 ip nat outside
 ip virtual-reassembly in
 atm route-bridged ip
 pvc 0/35
 protocol bridge
 encapsulation aal5snap
 
 -P
 
 
 
 
 > On 23/06/2016 1:47 PM, Cory Smelosky wrote:
> Found the actual problem!
> 
> IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE
from the DECnet tunnel IPs to a separate box as is currently configured.
> 
 
 So, does this mean that you're still off the air?
 
 Regards, Tim.
 
  
 
 `