[arin-announce] IPv4 Address Space (fwd)

Wed Oct 29 14:55:31 UTC 2003

On Wed, 29 Oct 2003, Avleen Vig wrote:

> Indeed, and IPSec tunnels are frequently done between routers on
> networks, rather than individual hosts on networks (at least in most
> multi-site enterprises i've seen).

The most common use of VPN links is the roadwarrior.
IPSEC in this context is broken badly by NAT. Even when the extensive
hackery required to workaround NAT is enabled, it still can not work in
the case where two roadwarriors are behind a single address connecting to
the same VPN gateway.