[Openswan Users] no l2tp traffic with NATed client

[Neil Ballantyne]

Yep, from Martin Koeppe's howto:

<------ Internet --------------><---------- private net ---------->
1.1.1.1                2.2.2.2    192.168.1.1           192.168.1.2
road warrior  -----------  Linux router  ------------  Windows server
              L2TP/IPSec              L2TP/plain after DNAT


The router is running Shorewall and Openswan, the windows box RRAS.

--
neil

 

> -----Original Message-----
> From: Norman Rasmussen [mailto:normanr at gmail.com] 
> Sent: 27 May 2005 14:47
> To: Neil Ballantyne
> Cc: Openswan Users Mlist
> Subject: Re: [Openswan Users] no l2tp traffic with NATed client
> 
> are the ipsec and l2tp daemons running on different machines?
> 
> On 27/05/05, Neil Ballantyne <Neil at liquide.uk.com> wrote:
> > For ref, the rule I'm using to forward traffic in to the 
> l2tp server is:
> > 
> > iptables -t nat -A PREROUTING -i eth0 -p udp --sport 1701 
> --dport 1701 
> > -j DNAT --to-destination xxx.xxx.xxx.xxx
> > 
> > --
> > neil
> >