This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec tunnels from LAN to Internet

Has anyone succesfully, or in design is it possible to, establish IPSec tunnels from the LAN to gateways on the Internet (NAT traversal)? Before I migrate to Astaro I have to know for sure that I can still run multiple IPSec VPN tunnels through the firewall like my existing Netfilter FW.

This thread was automatically locked due to age.

0 Marcel_01 over 22 years ago

may depend on your setup - ASL can do 'simple' masquerading - NO VPN-passthrough (esp-nat)

cheers
/marcel
Cancel
Vote Up 0 Vote Down

Cancel
0 stretch21 over 22 years ago in reply to Marcel_01

Is this on the roadmap? My wife and I both do work from home, using Nortel Contifvity to connect to our respective offices. Netfilter allows this. I am thinking about migrating to Astaro but this would be a definite show stopper.
Cancel
Vote Up 0 Vote Down

Cancel
0 mboughton over 22 years ago

I have two seperate networks protected by ASL 4.0 and ASL3.2. I use NAT/MASQ for all the hosts on the LAN side of both firewalls, the LAN clients are easily able to connect using PPTP to VPN's on the outside world.
Cancel
Vote Up 0 Vote Down

Cancel
0 stretch21 over 22 years ago in reply to mboughton

Okay. So, PPTP works. Is the official word that true IPSec tunnels using ESP and AH are not possible? If so, that seems surprising especially since Linux and NetFilter has supported that for at least a year, if not more.
Cancel
Vote Up 0 Vote Down

Cancel
0 pablito over 22 years ago in reply to stretch21

Have you enabled IPSEC and turned on the NAT-Traversal ? I haven't used it because I have the firewall do VPN but my understanding is that the NAT-Traversal patch does what you need.
Cancel
Vote Up 0 Vote Down

Cancel
0 stretch21 over 22 years ago in reply to pablito

I haven't tried it yet since I haven't installed the product. If that feature is available on Astaro, and it is intended to make multiple IPSec tunnels through a NATting firewall possible, then I am concvinced that I can use this product and recommend it to others.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel