Give a look at: http://www.cisco.com/warp/public/707/ipsecnat.html
Basically VPN tunnels thru NAT (static translation) are possible, but will not work wit PAT. The url should give you a decent idea of how this works, and pointers to additional documentation. Hth, Glenn -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Maiko Langelaar Sent: Tuesday, February 05, 2002 3:36 PM To: Brian Ford Cc: [EMAIL PROTECTED] Subject: Re: Using SafeNet/Soft-PK 2.1.2 behind corporate firewall toget out ... Hi Brian, > Are you the Firewall Administrator there? No, just an advisor from time to time :-) > What version of PIX Firewall hardware and OS are you running? PIX 5.3(2) - Actually, I just finished talking with our firewall admin and she mentioned that she had a similar challenge back when we were using Cisco PIX 4.3 and a NOTEL VPN Client. They wound up configuring a linux box in the DMZ since there was something about IP Masquerading that messed the whole thing up. That's what they are trying to setup again for me now. In other words any traffic destined from the VPN server abroad gets routed through the linux box and not the PIX router. If you can point me to a URL that explains how this is done in detail, I'd be very interested. I'm relatively new to the VPN style clients. The highest I've gotten to so far is SSH client/server which is no where as bewildering as some of this latest VPN stuff. Best regards, -- Maiko Langelaar Product Engineering Group SLMsoft.com Winnipeg, Manitoba, Canada Tel : 204-786-2656 (ext 439) Fax : 204-783-8286 Email : [EMAIL PROTECTED] www : http://www.slmsoft.com _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
