Where NAT disenfranchises the end-user ...

Richard Welty rwelty at averillpark.net
Fri Sep 7 03:46:30 UTC 2001


On Thu, 6 Sep 2001 22:29:38 -0400 (EDT) Bob K <melange at yip.org> wrote:
 
> On Thu, 6 Sep 2001, Doug Clements wrote:
> > Anything that a "full" internet connection gets you will also work
> > with one:one NAT.
 
> ...except current implementations of IPSEC:
 
> http://www.isp-planet.com/technology/2001/ipsec_nat.html
 
> Luckily, the above article also mentions the fixes that are in the
> works...

perhaps better to call them bandaids.

(the changes in IPSec are necessary for several reasons, but we don't have
to like them.)

richard
--
Richard Welty                                    Averill Park Networking
rwelty at averillpark.net                                      518-573-7592




More information about the NANOG mailing list