Re: IPIP tunnel behind NAT

2008-04-24 Thread Baldur Gislason
You need to do do a one-to-one NAT, so protocol 94 (IPIP) packets get forwarded. It's not TCP or UDP, so no ports there. Alternatively, you can set up a NAT traversing IPSEC-in-UDP tunnel, but that requires a kernel patch. Baldur On Thu, Apr 24, 2008 at 08:11:34AM -0400, Steve Bertrand wrote: >

Re: IPIP tunnel behind NAT

2008-04-24 Thread Steve Bertrand
Baldur Gislason wrote: It'll work fine. I've done this several times before. Hmmm. I still can't seem to get this setup to work. The FreeBSD box is in behind a Fortigate 200 unit. However I've also had NAT implementations which didn't work this way but this one should definitely work. Are

Re: IPIP tunnel behind NAT

2008-04-18 Thread Baldur Gislason
It'll work fine. I've done this several times before. However I've also had NAT implementations which didn't work this way but this one should definitely work. Baldur On Fri, Apr 18, 2008 at 09:25:50AM -0400, Steve Bertrand wrote: > Hi everyone, > > I'm trying to configure a GIF IPIP tunnel from