RE: IPSec vs. NAT vs. Route

> You'll get better answers on the general OpenBSD (or any Unix)
> lists than the limited audience here.

quite honestly - I'm sure you've seen the tension/flamewar..seems best to
search for knowledge elsewhere?

> That said, the two OpenBSD boxes labelled below should be
> able to IPSEC to each other and you send packets for the
> OTHER network through the IPsec tunnel.  So 192.168.1.4
> has a route for 192.168.2/24 through OpenBSD (left).
> OpenBSD (left) has a route for 192.168.2/24 through it's
> IPSec device.

Very true...but my goal is to have the windows users on the two 192.168.*
networks to be able to 'play together' (ie. file transfer/printers/etc).
Which leads me to the NAT and/or Routing questions..it's how to get the
other computers on those networks to talk 'through' the IPSec machine (which
are NOT currently the gateways)

Thx - Dave