[Openswan Users] Re: Help with WinXP behind NAT as client

Herbert Xu herbert at gondor.apana.org.au
Thu Mar 25 21:55:47 CET 2004


Paul Wouters <paul at xelerance.com> wrote:
> 
> No. It is about encapsulating proto 50 packets in udp poort 4500 packets.
> If your client can be coming in from behind nat, you MUST use nat_traversal=yes

That's true only if you've got at least two clients going to the same
server and a NAT-device that does not do pass-through.
-- 
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt


More information about the Users mailing list