Hi, I started playing with IPsec on my FreeBSD 6.1 and I was wondering if its possible to deploy an IPsec gateway behind a nat (1-1) router. Im not sure, but I remember reading somewhere that other implementations like Free/OpenSwan would let me to do that.
It would be something like: LAN--[ freebsd box (ipsec with internal ip)---[nat router(public ip)----[VPN clients] The VPN clients would be roadwarriors and/or other vpn gateways. Other question I have is, what is the recommended IKE daemon? I saw that in the ports there is at least three (ipsec-tools (with racoon), racoon2, and isakmpd). The isakmpd seems to be very clean, but I heard that its not full-featured as it is on OpenBSD. Im using racoon (from ipsec-tools) to encrypt my wireless traffic, but It core dumped a few times and Im abit anxious about it, heh... Best Regards, Maicon _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"