From owner-freebsd-questions@FreeBSD.ORG Mon Jul 11 08:06:58 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0E50D16A41C for ; Mon, 11 Jul 2005 08:06:58 +0000 (GMT) (envelope-from freebsd.ml@gmail.com) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 703E943D48 for ; Mon, 11 Jul 2005 08:06:57 +0000 (GMT) (envelope-from freebsd.ml@gmail.com) Received: by wproxy.gmail.com with SMTP id i23so792313wra for ; Mon, 11 Jul 2005 01:06:56 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=n8VwGLAbmn92ny+ybS2bVKxRstoIxydHhAY+XORTLAwDzwcC6nrqEBFTJ6IFPPP/H8QVQP8O5F5txZvOXQjwCbnpm5ry+/UuLegRy15p2ldE1LEl7ee3WQOZTnImK7yD/dJpzLbSAo47YoQLs8iQhWxZq/evF06kB/FYuLkOpbw= Received: by 10.54.36.15 with SMTP id j15mr1996811wrj; Mon, 11 Jul 2005 01:06:56 -0700 (PDT) Received: by 10.54.110.19 with HTTP; Mon, 11 Jul 2005 01:06:56 -0700 (PDT) Message-ID: Date: Mon, 11 Jul 2005 17:06:56 +0900 From: FreeBSD MailingLists To: questions Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Subject: Connecting IPSec from Behind a gateway X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: FreeBSD MailingLists List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2005 08:06:58 -0000 I am trying to connect 2 FreeBSD 5.4 boxes with an IPSec tunnel using racoon. The problem is the second box is behind a nat'd gateway.=20 The gateway router is a commercial box with "IPSEC Passthrough" enabled. What do I need to do to get this to work? Which IP (global or private) should I use when configure the connection? TIA, Tomoki Taniguchi