[Openswan Users] WinXP and "cannot respond to IPsec"

Dennis Leist dl at byteeffect.de
Tue Mar 16 10:44:25 CET 2004


Paul Wouters schrieb:

>On Wed, 10 Mar 2004, Dennis Leist wrote:
>
>  
>
>>I need to set up a VPN-Server located behind a Speed Touch Router. It's 
>>IP is static.
>>    
>>
>
>This in itself is a problem. A VPN server should not be behind NAT. Because
>only one of two parties can be behind NAT, not both. And your clients will
>be behind nat.
>  
>
Yeah, we work on that.

> [...]
>
> I would recommend changing the configuration of the speedtouch in 
> "single computer"
>
>mode, so that the linux vpn server actually does the PPTP. Then the Linux machine
>actually gets the ip 62.3.4.5
>  
>
We try to solve it by two ways and check the best.

1. Our provider will give us an extra IP that is routed to the 
VPN-server without any NAT.

2. Try to use the bridging mode of the router.

Maybe the first is the better....I keep you informed.

ccD



More information about the Users mailing list