[Openswan Users] Openswan gateway behind NAT

[Marcus Better]

> Windows should drop the packet.

I am not using Windows, fortunately. Perhaps you are answering a 
different thread? :)

> I dont think you can use proxy arp, because the client, gateway and ipsec
> gateway are on the same subnet.

I'm not sure what you mean by "client" here: the IPsec client is on the 
outside (road-warrior).

I was under the impression that in a virtual IP setup, the IPsec gateway 
would proxy-arp the virtual address of the road-warrior.

I will do some experimenting with virtual IP and see what happens.

Marcus