[Openswan Users] Openswan gateway behind NAT

Marcus Better marcus at better.se
Tue Jan 18 11:42:36 CET 2005

> Windows should drop the packet.

I am not using Windows, fortunately. Perhaps you are answering a 
different thread? :)

> I dont think you can use proxy arp, because the client, gateway and ipsec
> gateway are on the same subnet.

I'm not sure what you mean by "client" here: the IPsec client is on the 
outside (road-warrior).

I was under the impression that in a virtual IP setup, the IPsec gateway 
would proxy-arp the virtual address of the road-warrior.

I will do some experimenting with virtual IP and see what happens.


More information about the Users mailing list