Re: [IPsec] nat traversal and transport mode

2015-06-16 Thread Michael Richardson
Michał Zegan webczat_...@poczta.onet.pl wrote: I have heard that transport mode should not be used if the initiator is behind a NAT, even with nat traversal protocols, because this does have some issues. Yes, the issue is that on the gateway system, you wind up with zillions of

Re: [IPsec] nat traversal and transport mode

2015-06-16 Thread Paul Wouters
On Tue, 16 Jun 2015, Yoav Nir wrote: Transport mode works fine behind NAT devices. For example, L2TP clients connect to VPN gateways using transport mode and they work behind NAT devices. It is AH that cannot work behind NAT. It's a lot more complicated. Since transport mode crypto binds to

Re: [IPsec] nat traversal and transport mode

2015-06-16 Thread Yoav Nir
Hi. Transport mode works fine behind NAT devices. For example, L2TP clients connect to VPN gateways using transport mode and they work behind NAT devices. It is AH that cannot work behind NAT. HTH Yoav On Jun 16, 2015, at 2:34 PM, Michał Zegan webczat_...@poczta.onet.pl wrote:

[IPsec] nat traversal and transport mode

2015-06-16 Thread Michał Zegan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello. I have heard that transport mode should not be used if the initiator is behind a NAT, even with nat traversal protocols, because this does have some issues. However, I am not quite sure if I understand what issues are that? Also, does it mean