weird results while ipsec + ipfv_nat (nat before vpn)

2011-08-03 Thread Zeus V Panchenko
Hi, i faced weird for me situation, may somebody agree to help to win it, please? we need to see some http/s resources behind the Cisco PIX IPSEC i'm trying to get working this schema: SCHEMA (`nat before vpn' as i believe): -- +- a.a.0.1/16 LAN | +- a.a.a.2/24 FreeBSD b.b.b.1 -

Re: weird results while ipsec + ipfv_nat (nat before vpn)

2011-08-03 Thread Ian Smith
On Wed, 3 Aug 2011, Zeus V Panchenko wrote: [..] I can't comment on your ipsec setup at all, but: cat /etc/ipfw.conf ... add 000401 allow udp from x.x.x.x to y.y.y.y isakmp add 000402 allow udp from y.y.y.y to x.x.x.x isakmp add 000403 allow { esp or ipencap } from x.x.x.x to