Re: NAT-T + ipsec integration

2008-12-14 Thread VANHULLEBUS Yvan
On Fri, Dec 12, 2008 at 01:50:12PM -0500, Stephen Clark wrote: [...] > Are there any restrictions for nat-t on freebsd-6, like number of vpns that > can be natted? NAT-T generates quite no more restrictions than non NAT-T tunnels. Number of VPN tunnels may be a little bit lower with NAT-T than wi

Re: NAT-T + ipsec integration

2008-12-12 Thread Artyom Viklenko
On Fri, 12 Dec 2008, VANHULLEBUS Yvan wrote: On Fri, Dec 12, 2008 at 06:45:20PM +0200, Artyom Viklenko wrote: On Thursday 11 December 2008 14:39:58 VANHULLEBUS Yvan wrote: [] Actually, you can apply a patch to src/sys and recompile your kernel with IPSEC_NAT_T options. Patches are availab

Re: NAT-T + ipsec integration

2008-12-12 Thread Stephen Clark
VANHULLEBUS Yvan wrote: On Fri, Dec 12, 2008 at 06:45:20PM +0200, Artyom Viklenko wrote: On Thursday 11 December 2008 14:39:58 VANHULLEBUS Yvan wrote: [] Actually, you can apply a patch to src/sys and recompile your kernel with IPSEC_NAT_T options. Patches are available here: http://people

Re: NAT-T + ipsec integration

2008-12-12 Thread VANHULLEBUS Yvan
On Fri, Dec 12, 2008 at 06:45:20PM +0200, Artyom Viklenko wrote: > On Thursday 11 December 2008 14:39:58 VANHULLEBUS Yvan wrote: [] > > Actually, you can apply a patch to src/sys and recompile your kernel > > with IPSEC_NAT_T options. > > Patches are available here: > > http://people.freebsd.or

Re: NAT-T + ipsec integration

2008-12-12 Thread Artyom Viklenko
On Thursday 11 December 2008 14:39:58 VANHULLEBUS Yvan wrote: > On Thu, Dec 11, 2008 at 04:02:01AM -0800, Gabe wrote: > > Hello all > > Hi. > > > Does anyone know how to enable nat traversal on freebsd? > > > > I've got a site to site ipsec tunnel setup but clients behind the > > nat can't vpn thro

RE: RE: NAT-T + ipsec integration

2008-12-12 Thread Gabe
Hehehe no I was just wondering. I'm running 7 and the patch installed just fine. -Original Message- From: VANHULLEBUS Yvan Sent: Friday, December 12, 2008 6:53 AM To: Gabe Cc: freebsd-net@freebsd.org Subject: Re: RE: NAT-T + ipsec integration On Fri, Dec 12, 2008 at 05:51:31AM

Re: RE: NAT-T + ipsec integration

2008-12-12 Thread VANHULLEBUS Yvan
On Fri, Dec 12, 2008 at 05:51:31AM -0800, Gabe wrote: > So far so good... Should I be worried that the patch file names have 'test' > in them? I can rename them if you want ;-) Patch for FreeBSD6 is stable enough to be used in production and to survive non regression test suite at NETASQ. Patch

RE: NAT-T + ipsec integration

2008-12-12 Thread Gabe
So far so good... Should I be worried that the patch file names have 'test' in them? -Original Message- From: Gabe Sent: Thursday, December 11, 2008 5:31 AM To: VANHULLEBUS Yvan Cc: freebsd-net@freebsd.org Subject: RE: NAT-T + ipsec integration Ok recompiling now. Hopefull

RE: NAT-T + ipsec integration

2008-12-11 Thread Gabe
Ok recompiling now. Hopefully it works fine. I'll report back. Thanks. -Original Message- From: VANHULLEBUS Yvan <[EMAIL PROTECTED]> Sent: Thursday, December 11, 2008 4:39 AM To: Gabe <[EMAIL PROTECTED]> Cc: freebsd-net@freebsd.org Subject: Re: NAT-T + ipsec integratio

Re: NAT-T + ipsec integration

2008-12-11 Thread VANHULLEBUS Yvan
On Thu, Dec 11, 2008 at 04:02:01AM -0800, Gabe wrote: > Hello all Hi. > Does anyone know how to enable nat traversal on freebsd? > > I've got a site to site ipsec tunnel setup but clients behind the > nat can't vpn through it. Any help would be appreciated. Actually, you can apply a patch to s