IPSec/NAT single gateway?

2001-05-30 Thread Brad Waite
FBSD | | 10.0.1.1 | | | < PC net on 10.0.1.0 > Will this work, or will the DSL router's NAT break IPsec? Also, are there problems with traffic to/from the Internet? Should I NAT that, or just use a 255.255.0.0 mask? T

Problems with IPsec tunnel

2001-06-21 Thread Brad Waite
Hello, I'm having quite the time trying to set up a IPsec tunnel on 4.3-RELEASE. Host-to-host IPsec works fine - I can make connections all day long between my two gateways. But for the life of me, I can't get my windows boxen on each end to talk to the other. I've got identical psk.txt files

Re: Problems with IPsec tunnel

2001-06-22 Thread Brad Waite
Soichi, Thanks for the response. As it turns out, the problem my own stupidity - I forgot to turn on IP forwarding on one of the gateways. sysctl -w net.inet.ip.forwarding=1 fixed things right up. :) And since you're coming from KAME, maybe you can answer something else for me. Can you tell m

Re: Problems with IPsec tunnel

2001-06-25 Thread Brad Waite
Soichi, As it turns out, NAT works fine. Thanks for all your help. -Brad On Fri, 22 Jun 2001, Shoichi Sakane wrote: > > Can you tell me if I will run into any problems running NAT on my gateways? > > I have never used NAT with IPSec. You should tell this mailing list your > problem. Becau