From owner-freebsd-questions@FreeBSD.ORG Mon Nov 3 05:05:25 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7FBE616A4CE for ; Mon, 3 Nov 2003 05:05:25 -0800 (PST) Received: from o9.88.net (82-35-42-29.cable.ubr02.camd.blueyonder.co.uk [82.35.42.29]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4A05843FA3 for ; Mon, 3 Nov 2003 05:05:24 -0800 (PST) (envelope-from john@zog.net) Received: from localhost (localhost [127.0.0.1]) by o9.88.net (Postfix) with ESMTP id C0BF5142DB7; Mon, 3 Nov 2003 13:05:22 +0000 (GMT) Received: from o9.88.net ([127.0.0.1]) by localhost (o9.88.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22415-10; Mon, 3 Nov 2003 13:05:22 +0000 (GMT) Received: by o9.88.net (Postfix, from userid 33) id AACB9142DA4; Mon, 3 Nov 2003 13:05:22 +0000 (GMT) Received: from 198.240.212.26 (proxying for 198.240.212.26) (SquirrelMail authenticated user john) by www.88.net with HTTP; Mon, 3 Nov 2003 13:05:22 -0000 (GMT) Message-ID: <48737.198.240.212.26.1067864722.squirrel@www.88.net> In-Reply-To: <010101c3a209$4e78f0a0$850f10ac@uk.circle.com> References: <010101c3a209$4e78f0a0$850f10ac@uk.circle.com> Date: Mon, 3 Nov 2003 13:05:22 -0000 (GMT) From: "John Morgan Salomon" To: "Vince Hoffman" User-Agent: SquirrelMail/1.4.2 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 Importance: Normal X-Virus-Scanned: by amavisd-new-20030616-p5 (Debian) at 88.net cc: freebsd-questions@freebsd.org Subject: Re: VPN through NAT X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: john@zog.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Nov 2003 13:05:25 -0000 It's possible, but has to do with how VPN-1 is set up. Read up on the difference between "tunnel" vs. "transport" mode-- I suggest having a look at the Phoneboy archives (http://www.phoneboy.com). VPN-1 has a NAT support option, I've had it work a charm with ipfilter/ipnat, as well as with pf on OpenBSD. Make sure you're permitting AH/ESP (IP types 50 and 51, I believe) and the original IKE connectino (UDP/500). Caveat: double-check the above, it's been a while since I've needed it. Cheers, -John > Hi all, > At my firm we use checkpoint VPN-1 so our windows laptop users can > access the network from remote locations Clients offices etc etc., I'd > like > my Freebsd laptop to be able to do the same but i'm not sure if its > possible > as most locations are NATed these days and the only doc on getting > Checkpoint freebsd talking deals with a VPN between two external IPs and > the > nets behind them. Has anyone ever tried getting a similar setup as i need, > to work ? > > Thanks > Vince > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" >