Re: [Users] IPSec (FreeSWAN) gateway behind a NAT box.

From: Keith Morse (kgmorse_at_mpcu.com)
Date: Mon Oct 07 2002 - 23:21:33 CEST


On Mon, 7 Oct 2002, Ihsan Turkmen wrote:

> Hi
>
> As far as I know, because of the nature of ESP packets, it is difficult ,
> maybe impossible as well, to place an IPSec gateway behind a NAT device.
> However, I have happened to see some efforts in the internet to solve this
> problem. Some good guys are probably working to allow IPSec packets traverse
> the NAT device.If any of you out there has knowledge about that,can he give
> me some information about the current state of these efforts.?
>
>
> Ihsan..

Impossible no, perhaps difficult though. I've done this in support of a
business customer of hours. We used a one to one NAT on the firewall to
help facilitate this.

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.5 : Tue Oct 08 2002 - 05:20:20 CEST