[64017] in North American Network Operators' Group
Re: Block all servers?
daemon@ATHENA.MIT.EDU (Stefan Mink)
Tue Oct 14 12:34:48 2003
Date: Tue, 14 Oct 2003 18:30:20 +0200
From: Stefan Mink <mink@schlund.net>
To: ken emery <ken@cnet.com>
Cc: nanog@merit.edu
In-Reply-To: <Pine.GSO.4.44.0310110824430.2616-100000@cappone>
Errors-To: owner-nanog-outgoing@merit.edu
--kntY2sT8OZ5Mi0xH
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sat, Oct 11, 2003 at 08:28:11AM -0700, ken emery wrote:
> > I use IPSEC and it works fine behind NAT.
>=20
> Yes, it does work, on a small scale. However what if your neighbor
> wants to IPSEC to the same place (say you work at the same place).
> If both of you are NAT'd from the same IP address trying to IPSEC
> to the same IP address? I don't believe things will work in this
> instance.
why not? We use it here, works fine (with certificates for auth).
tschuess
Stefan
--=20
Stefan Mink, Schlund+Partner AG (AS 8560)
Primary key fingerprint: 389E 5DC9 751F A6EB B974 DC3F 7A1B CF62 F0D4 D2BA
--kntY2sT8OZ5Mi0xH
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE/jCScehvPYvDU0roRAhg8AKCptIw6TIe3kUiwWxGVScLP1mNmZwCgyYIk
tQPXZTRJY2Bi2Xbhuby3AfM=
=NFMx
-----END PGP SIGNATURE-----
--kntY2sT8OZ5Mi0xH--
