RE: Completely transparent VPN between NATed sites

"Ryan Malayter" <[email protected]>
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Almost and IPsec device can do it. We've used both SonicWall and Nokia/Checkpoint devices.

All we did was set up a security association for the remote private network, using its public address as the Ipsec gateway. We did the same thing on the other device, and both talk to each other just fine. Basically, the gateway address doesn't have to bear any relationship to the network in an SA.

-----Original Message-----
From: Sam Wun [mailto:[email protected]] 
Sent: Saturday, August 16, 2003 1:03 AM
To: Ryan Malayter; [email protected]
Cc: [email protected]
Subject: RE: [VPN] Completely transparent VPN between NATed sites



How can you do that? what product do you used to set it up? Is there any tech doc I can find?

thanks
sam

Ryan Malayter <[email protected]> wrote:
We have just such a setup, and every protocol or application I've tried has worked fine. To the machines on each netowrk, the VPN tunnel look just like a plain old "pass-everything" router.


-----Original Message-----
From: René Matthäi [mailto:[email protected]] 
Sent: Friday, August 15, 2003 5:00 AM
To: [email protected]
Subject: [VPN] Completely transparent VPN between NATed sites


Hi,

do you think it is generally possible to run a setup such as


LAN-A ----- FW/NAT =====(internet)===== FWL/NAT ----- LAN-B
192.168.1.x 192.168.2.x


so that _everything_ works, including FTP, LDAP, H.323...?

I mean, practically possible :-)

I am interested in both suggestions for specific hardware and also 
especially the OpenSource solutions FreeS/WAN, KAME and builtin ipsec 
under the *BSDs.

Greetings,

René


_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn
_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpnom
http://lists.shmoo.com/mailman/listinfo/vpn

Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.