RE: IPSec Problem over Router

[Charlie Winckless <CharlieW () netarch com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

IPSec NAT traversal is an RFC, I believe, and
supported on devices like Cisco 1710 routers
(dual ethernet, relatively low cost for Cisco,
X.509 support..)

- -- Charlie


> -----Original Message-----
> From: red temptation [mailto:red_temptation2003 () yahoo de]
> Sent: Thursday, September 25, 2003 8:00 AM
> To: security-basics () securityfocus com
> Subject: IPSec Problem over Router
>
>
> hi,
>
> we have a Problem concerning IPSec. We want to create
> a tunnel from a WinXP Laptop (located on the Internet
> with an official IP), to a private Network (using
> NAT). For authentication purpose we use certificates.
>
> It's no problem to open Port 500 on our current
> Network-Router, but Protocol 50 and 51 are not
> supported while using NAT. That's why we are not able
> to establish an IPSec tunnel with that router.
>
> Can anyone suggest a low cost Router with the ability
> to store certificates and enable us to establish the
> tunnel. It should have an included firewall.
>
> regards,
> ~ R T ~
>
> ---
> Don't ask what you can do for your country,
> ask what your country did to you!!
>
>
> __________________________________________________________________
>
> Gesendet von Yahoo! Mail - http://mail.yahoo.de
> Logos und Klingeltöne fürs Handy bei http://sms.yahoo.de
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> --------------

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQA/AwUBP3MgWcrtF6HAen5cEQIdaACgkeOxPV/ZhftMq1sK6iBPp8bCbFkAoLeM
8jNf4J89uIOIfoW1ujlPjYF+
=33at
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
----------------------------------------------------------------------------