-----BEGIN PGP SIGNED MESSAGE----- John Goerzen [mailto:[EMAIL PROTECTED] wrote:
> On Tue, Jan 20, 2004 at 10:46:52AM -0800, Marc Singer wrote: > > What I'm not finding is how to get this working where there are hosts > > behind NAT'ing routers. In this case, a wireless AP that provides > > limited configurability and no ipv6 support. Using the already > > If you can configure it to let protocol 41 (ipv6) through, you may be > able to make things work. (I have been able to do that going > through a Shorewall IPV4-only NAT box.) Setting up a box to have one internal IP as the "DMZ" helps too. Most of the boxes allow it, but some do not. > However, you may not be able to do that on your AP. You may > need a more powerful router. Please don't call these things routers ;) > > What I've deduced is that there is a need for another kind of tunnel, > > either ipip or ipsec. Am I on the right track? > > Well, that depends on what you're trying to do. If you're trying to > join the global IPv6 network, that won't help. However, AFAIK, you'll > run into the same issues with IPSec. Why not? Routing IPv6 over a tunnel... is routing IPv6 over a tunnel, doesn't matter if it goes over IPSec or whatever ;) Using tinc for tunneling IPv6 into networks that are even firewalled away is even a well used method for this. Greets, Jeroen -----BEGIN PGP SIGNATURE----- Version: Unfix PGP for Outlook Alpha 13 Int. Comment: Jeroen Massar / http://unfix.org/~jeroen iQA/AwUBQA2FmSmqKFIzPnwjEQKryACgqGihPVRXO7nggcBFnchTBqMyusYAoI/c /Z0eNBgc/6A7Y5CeZNf8BJ/K =llgF -----END PGP SIGNATURE-----
