[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: vpn

On Wed, 13 Feb 2002 14:46:11 -0000 Tariq Rashid <tariq@inty.net> wrote:

> ipsec generally doesn't work with NAT:
> 
> http://www.networkcomputing.com/1123/1123ws2.html

you know, this is commonly accepted (i used to say it) but actually, if he
avoids AH and sticks to ESP, there's a fair chance it can be gotten to
work.

AH is generally the sticking point with NAT. ESP doesn't care what you do
with the IP addresses in the packet.

richard
--
Richard Welty                                         rwelty@averillpark.net
Averill Park Networking                                         518-573-7592
              Unix, Linux, IP Network Engineering, Security