Re: IpSec, NAT & Bridge

["B. Culibrk" <bc@ectrl.com>]

On Fri, 2004-01-23 at 20:40, Steve wrote:

> All that's needed on LAN 2 is access to a server on LAN 1. 
> 
> LAN 2 (172.16.2.0)
>     |
> Firewall
>     .
>     .
> INTERNET
>     .
>     .
> Border F/W 
>     |
>     -------- Mail server 
>     |
> Bridge F/W
>     |
> LAN 1 (10.0.1.0)
> 
> Questions:
> 
> Can I put a vpn between the Bridge F/W and the LAN 2 F/W, or does bridging 
> in PF exclude that capability?

Yes you can. Try setup a VPN using isakmpd between firewall ( on LAN 2
site ) and Border F/W, if I understood good enough your ascii art.

After that you will be able to see 10.0.1.0/24 from 172.16.2.0/24 and
vice versa.