RE: VPN with NAT

[Ben Nagy <bnagy () cpms com au>]

If you want to connect to something across the Internet, the thing you're
connecting to must have a legal IP address. End of story. 

PPTP works fine through NAT on Cisco routers for me. The only caveat is that
you probably need to have a "complete" IP translation, not port based. This
is because the GRE traffic needs to make it to the destination internal host
somehow, and I don't know of anything that allows you to make translations
based on non tcp / udp protocols.

Once you're connected to the PPTP session, you'll get given a new IP address
in the internal range of whatever you connected to.

Cheers,

--
Ben Nagy
Network Consultant, CPM&S Group of Companies
Direct: +61 8 8422 8319            Mobile: +61 414 411 520


> -----Original Message-----
> From: Stan Anderson [mailto:Stan () iconfitness com]
> Sent: Wednesday, July 28, 1999 7:46 AM
> To: 'firewall-wizards () nfr net'
> Subject: VPN with NAT
>
>
> When you set up VPN with PPTP, does it have to point to a 
> legal internet
> address, and if it does, can you just use NAT to point it to 
> a server on
> your local network
>
>
>       Thanks,
>
>         Stan Anderson
>         ICON Health & Fitness, Inc.
>         (435) 750-7795