On Wed, May 09, 2007 at 02:51:35PM +0200, Michael wrote: > Now, as I understand it, it isn't possible to create an IPsec connection > from a single host within a NATed network to an external server but > OpenVPN works great here. Please correct me if I am wrong. (I have no > access to the NAT router here.)
If the router allows UDP traffic on ports 500 and 4500, isakmpd will fall back to NAT-traversal automatically if it decides it's necessary.