[41351] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re[2]: Where NAT disenfranchises the end-user ...

daemon@ATHENA.MIT.EDU (Richard Welty)
Thu Sep 6 23:45:33 2001

Date: Thu, 6 Sep 2001 23:46:30 -0400 (Eastern Daylight Time)
From: Richard Welty <rwelty@averillpark.net>
To: nanog@merit.edu
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-Disposition: INLINE
In-Reply-To: <Pine.BSF.4.21.0109062222180.52732-100000@pi.yip.org>
Message-Id: <E15fCZY-00041c-00@krusty-motorsports.com>
Errors-To: owner-nanog-outgoing@merit.edu


On Thu, 6 Sep 2001 22:29:38 -0400 (EDT) Bob K <melange@yip.org> wrote:
 
> On Thu, 6 Sep 2001, Doug Clements wrote:
> > Anything that a "full" internet connection gets you will also work
> > with one:one NAT.
 
> ...except current implementations of IPSEC:
 
> http://www.isp-planet.com/technology/2001/ipsec_nat.html
 
> Luckily, the above article also mentions the fixes that are in the
> works...

perhaps better to call them bandaids.

(the changes in IPSec are necessary for several reasons, but we don't have
to like them.)

richard
--
Richard Welty                                    Averill Park Networking
rwelty@averillpark.net                                      518-573-7592


home help back first fref pref prev next nref lref last post