From: Sam Sgro (sam_at_freeswan.org)
Date: Thu Oct 31 2002 - 21:01:31 CET
-----BEGIN PGP SIGNED MESSAGE-----
On Thu, 31 Oct 2002, Javier García de Bringas wrote:
> I'm thinking about doing an IPSec tunnel to a remote server using
> FreeS/WAN. However, my PC has a private IP address and there is a router
> doing NAPT in order to allow it and some other PCs to access Internet. I
> have no way of changing anything in the router as it is owned by my ISP. How
> can I do a VPN using FreeS/WAN in this situation? I understand the problems
> NAT creates to IPSec connections, however I know some vendors have
> implemented non-standard extensions to IPSec in order to pass through NAT.
> The one I've seen encapsulates IPSec in TCP packets, so NAT doesn't affect
> the encrypted neither the authenticated part. Are there any such extensions
> in FreeS/WAN? Is it something under development (maybe I could help with
> it), or in the contrary it isn't been thought about at all?
NAT-Traversal. You'll have to install it on the remote server as well.
http://open-source.arkoon.net
http://www.freeswan.ca/code/super-freeswan
- --
Sam Sgro
sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPcGMHkOSC4btEQUtAQE+XwQA2g/8VdG09BtOjCBcAGXP0JC2P3vnlge6
lVhz0OTIpr04IkcH31oHLE0i+G8fEL+X0Gvo8Dbvh0GDyE1OTj1NgMcu87wKbRr0
/X0tb70AYRfml6sMVq+yunyP0NcyfICzsZqPgpgrchx5/czl9E9YffBdK92B0BlN
2GFR4JBx9OE=
=wRik
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Fri Nov 01 2002 - 05:20:36 CET