nat-t

I think this is the right place to ask this question...and not in the main forums..

I am trying to connect remote users using the SSH client to an astaro firewall using a roadwarrior setup.

Many of my remote users sit behind home NAT devices...

Now i know that NAT does not play nice with ipsec...PROBLEM

solution - nat-t...which is an option in SSH

Problem - inorder for nat-t to work according to ssh it must be implemented on both sides...in the current version of astaro it is not

possible solution...http://open-source.arkoon.net/

eureka!! I cried....

can anyone verify this for me...or am i just crazy??

asher

0 Tmor over 23 years ago

I also have been working on this problem.

hmm.. kernel modifications are needed. not to thrilled about that [:(]

The only other solution that I have is to replace existing Routers/Gateways on the internal networks with devices that support X509 Certs.

Tmor
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 asher over 23 years ago in reply to Tmor

I wonder if with the help of other users who use x509 cert. and nat routers wer can begin to compile a list of nat routers that seem to pass ipsec packets without issue

asher
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel