Re: (ASCEND)IPSEC over NAT for Pipe75

[Matt Holdrege <matt@ascend.com>]

At 01:13 PM 8/20/99 +0200, Thomas Falk Claezon wrote:
>IPSEC's job is to make packets unintelligible and unalterable, and NAT
>relies on being able to understand packets and make helpful modifications
>to them en route. Because of this IPSEC an NAT doesn't coexist very well.
>
>However, if I have got it right, there are circumstances when you can use
>IPSEC ESP over NAT (but currently not when using a Pipe75 and single
>IP NAT), IPSEC AH can not be used over a NATed connection.

We've have a special reverse tunnel NAT which allows IPsec to work through 
NAT on a Pipeline for a while now. It requires Secure Access and is 
configured from the Secure Access Manager. See the Secure Access Managers 
manual for more info.

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>