IPsec problems with multiple clients behind same NAT

Hello misc, I'm having problems with two IPsec tunnels from two different peers behind the same NAT, to the same responder. All hosts are running OpenBSD 4.1, including the NAT:ing gateway. One peer can connect just fine, but when the other tries to establish a tunnel (with a different tunneled

Re: IPsec problems with multiple clients behind same NAT

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Martin Hedenfalk Sent: Friday, August 17, 2007 09:22 AM To: OpenBSD Subject: IPsec problems with multiple clients behind same NAT Hello misc, I'm having problems with two IPsec tunnels from two

Re: IPsec problems with multiple clients behind same NAT

On 8/17/07, stuart van Zee [EMAIL PROTECTED] wrote: (snip original message) Ok... my IPSEC foo is really not all that powerful so if anyone out there finds me to be completely wrong, please point and laugh, but here is the problem you are having as far as I understand it. IPSec does not

Re: IPsec problems with multiple clients behind same NAT

Hey, Can you UDP encapsulate the IPSEC ESP packets ? I believe most IPSEC servers and clients can support this feature, which also helps when going through NAT gateways. http://www.faqs.org/rfcs/rfc3948.html

Re: IPsec problems with multiple clients behind same NAT

On 8/17/07, Michael Gale [EMAIL PROTECTED] wrote: Hey, Can you UDP encapsulate the IPSEC ESP packets ? Yes, isakmpd do that automatically. ESP doesn't traverse NAT at all. -martin I believe most IPSEC servers and clients can support this feature, which also helps when going