[42202] in North American Network Operators' Group
Re: IPSEC and PAT
daemon@ATHENA.MIT.EDU (Adam Herscher)
Fri Sep 14 01:16:42 2001
Date: Thu, 13 Sep 2001 22:15:34 -0700 (PDT)
From: Adam Herscher <adam@xtime.com>
To: Bora Akyol <akyol@akyol.org>
Cc: Tony Rall <trall@almaden.ibm.com>, nanog@merit.edu
In-Reply-To: <3BA11E890000B77C@mail.san.yahoo.com> (added by postmaster@mail.san.yahoo.com)
Message-ID: <Pine.GSO.4.10.10109132214010.2084-100000@sundev1>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Thu, 13 Sep 2001, Bora Akyol wrote:
>
> I believe that at least one VPN client also does UDP encapsulation for
> IPSEC packets specifically for NAT traversal.
>
> Bora
The Cisco VPN client does UDP encapsulation. But of course, the "server"
needs to support it as well. The PIX OS does not; the concentrators do.
