Date: Fri, 18 Oct 2002 07:36:30 -0700 From: Lars Eggert <larse@ISI.EDU> To: Matthew Zahorik <matt@hottub.org> Cc: freebsd-net@freebsd.org Subject: Re: IPSEC/NAT issues Message-ID: <3DB01C6E.7030308@isi.edu> References: <Pine.GSO.4.40.0210180628271.5762-100000@hottub>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
Matthew Zahorik wrote:
> On Fri, 18 Oct 2002, Andrew P. Lentvorski wrote:
>
>>You cannot NAT an IPSEC packet. NAT rewrites the IP headers and the
>>packet will get rejected when it reaches the other IPSEC node.
>
> Not exactly true. I use a Windows Nortel Contivity client behind NAT just
> fine.
Reading his first post, the original poster wants to IPsec NAT'ed
packets, not vice versa.
Lars
--
Lars Eggert <larse@isi.edu> USC Information Sciences Institute
[-- Attachment #2 --]
0 *H
01 0 + 0 *H
080fErtcvE.0
*H
01 0 UZA10U Western Cape10U Cape Town10U
Thawte Consulting1(0&U Certification Services Division1$0"UThawte Personal Freemail CA1+0) *H
personal-freemail@thawte.com0
000830000000Z
040827235959Z01 0 UZA10U Western Cape10U Cape Town10
U
Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.3000
*H
0 32c %E>nx'gڈD)c5*mp<ܮto034qmOe
KaU5u'rװ |CBPQ<9TIf - ki N0L0)U "0 0 10UPrivateLabel1-2970U 0 0 U 0
*H
1KG]qSl]y=&b""I'{9$
*8PUl
LGl X1B li+@]jy.%݊
Z<D&iHΥbb090%A0
*H
01 0 UZA10U Western Cape10U Cape Town10
U
Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.300
020824185339Z
030824185339Z0T10
UEggert1
0 U*Lars10U Lars Eggert1 0 *H
larse@isi.edu0"0
*H
0
6Fxΰ7a ED&0+Dj)ֽXCUcnleijmz~S0J jWV~ 1^({IݛLjӖ
ao:bP}WLVܱ욗cD ɖ_Kv.A(W4 9;Z8-uXE
6b
@_0%#d` Rto5 L0R`w@7
r Hcc U 3%7 N_o V0T0*+e!0 00L2uMyffBNUbNJJcdZ2s0U 0
larse@isi.edu0 U 0 0
*H
]Ȕ,fK< cj RZeLa n@Z6,=
fK?yO#8+ Ni*LSfpQg <(aӒ$kTx_AL1>ގ|S090%A0
*H
01 0 UZA10U Western Cape10U Cape Town10
U
Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.300
020824185339Z
030824185339Z0T10
UEggert1
0 U*Lars10U Lars Eggert1 0 *H
larse@isi.edu0"0
*H
0
6Fxΰ7a ED&0+Dj)ֽXCUcnleijmz~S0J jWV~ 1^({IݛLjӖ
ao:bP}WLVܱ욗cD ɖ_Kv.A(W4 9;Z8-uXE
6b
@_0%#d` Rto5 L0R`w@7
r Hcc U 3%7 N_o V0T0*+e!0 00L2uMyffBNUbNJJcdZ2s0U 0
larse@isi.edu0 U 0 0
*H
]Ȕ,fK< cj RZeLa n@Z6,=
fK?yO#8+ Ni*LSfpQg <(aӒ$kTx_AL1>ގ|S1'0#001 0 UZA10U Western Cape10U Cape Town10
U
Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.30%A0 + a0 *H
1 *H
0 *H
1
021018143631Z0# *H
1y.[e}48v!0R *H
1E0C0
*H
0*H
0
*H
@0+0
*H
(0 *H
101 0 UZA10U Western Cape10U Cape Town10
U
Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.30%A0
*H
ljAǿ*O/;9D,
gW
"%ds}lWBWzWnt^p8rb{6 G=GG?.ܕ 7`Bi&悛>.1?fEiY$ Ǥptcy%g E@)eCڝ51X˳3mZǩȬnE|"IBFWNH{!f R {W/WI
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3DB01C6E.7030308>