From owner-freebsd-security  Fri Sep 22 22:24:33 2000
Delivered-To: freebsd-security@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id 441A737B423
	for <freebsd-security@freebsd.org>; Fri, 22 Sep 2000 22:24:30 -0700 (PDT)
Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Fri, 22 Sep 2000 22:23:20 -0700
Received: (from cjc@localhost)
	by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id e8N5OSZ42209;
	Fri, 22 Sep 2000 22:24:28 -0700 (PDT)
	(envelope-from cjc)
Date: Fri, 22 Sep 2000 22:24:28 -0700
From: "Crist J . Clark" <cjclark@reflexnet.net>
To: "Ron 'The InSaNe One' Rosson" <insane@lunatic.oneinsane.net>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: Kame VPN/IPsec FreeBSD srvr to Win32 VPN clients?
Message-ID: <20000922222428.I367@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <5.0.0.25.0.20000921160730.03582040@mail.Go2France.com> <20000921081815.A65154@lunatic.oneinsane.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <20000921081815.A65154@lunatic.oneinsane.net>; from insane@lunatic.oneinsane.net on Thu, Sep 21, 2000 at 08:18:15AM -0700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, Sep 21, 2000 at 08:18:15AM -0700, Ron 'The InSaNe One' Rosson wrote:
> Len Conrad (lconrad@Go2France.com) wrote:
> > What experience does anybody have with the above?
> > 
> > Using which Win32 VPN client?
> > 
> 
> I am looking for the same thing but I want FreeBSD as a client too. Also
> want to know if I can use the private IP space for the VPN addresses on
> the VPN server and use NAT to allow them to use the network that they
> VPN'd to.
> 
> or am I thinking the impossible?  ;-)

You can run ESP between any two hosts. NAT all you want.

You cannot do AH between two hosts if the address of one has been
NAT'ed.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message