Where NAT disenfranchises the end-user ...

Bob K melange at yip.org
Fri Sep 7 05:06:41 UTC 2001


> > ...except current implementations of IPSEC:
> >
> > http://www.isp-planet.com/technology/2001/ipsec_nat.html
> >
> > Luckily, the above article also mentions the fixes that are in the
> > works...

On Thu, 6 Sep 2001, Bora Akyol wrote:

> Bob
> I am not supporting NAT here, but
> most common IPSEC implementations including Free S/WAN work fine behind 
> NAT.
> 
> Bora

I stand corrected after perusing http://jixen.tripod.com/#NATed%20gateways
- although I'm not sure I'd describe that as working "fine", but rather
"can be made to work, in a narrow set of circumstances".  It should be
noted that the Free S/WAN docs explicitly recommend against trying it.

-- 
Bob <melange at yip.org> | Yes.  I know.  That is, indeed, *not* mayonnaise.









More information about the NANOG mailing list