VPN (IPSEC)

Bob McConnell rvm at CBORD.com
Mon Jun 2 16:31:31 UTC 2008


On Behalf Of alexus
>
>anyone?
>
>
>On Sat, May 31, 2008 at 7:49 PM, alexus <alexus at gmail.com> wrote:
>> Hello,
>>
>> I'm trying to establish a VPN tunnel over internet, I read a
>> http://www.freebsd.org/doc/en/books/handbook/ipsec.html on how to set
>> it up, I'm some what strangeling if my setup will work at all.
>>

IIRC, IPSEC cannot work through a NAT connection. NAT changes header
fields that IPSEC uses for packet authentication. So the receiver cannot
validate the content of the modified header.

Bob McConnell


More information about the freebsd-questions mailing list