nanog mailing list archives

Re: Block all servers?


From: Stefan Mink <mink () schlund net>
Date: Tue, 14 Oct 2003 18:30:20 +0200

On Sat, Oct 11, 2003 at 08:28:11AM -0700, ken emery wrote:
I use IPSEC and it works fine behind NAT.

Yes, it does work, on a small scale.  However what if your neighbor
wants to IPSEC to the same place (say you work at the same place).
If both of you are NAT'd from the same IP address trying to IPSEC
to the same IP address?  I don't believe things will work in this
instance.

why not? We use it here, works fine (with certificates for auth).

   tschuess
             Stefan
-- 
Stefan Mink, Schlund+Partner AG (AS 8560)
Primary key fingerprint: 389E 5DC9 751F A6EB B974  DC3F 7A1B CF62 F0D4 D2BA

Attachment: _bin
Description:


Current thread: