[Openswan Users] VPN server in private net?

[Paul Wouters]

On Tue, 24 Jan 2006, Jerry Kaidor wrote:

>    My customer moved, and got a new DSL with a new ISP.  It's a dynamic
> IP.  Unfortunately, it's also a PRIVATE ( 172.16 ) IP, and she has no
> public address whatsoever!
>
>    I'm sure I can use NAT-T to have this server connect OUT to another
> openswan machine.  But I can't imagine any way a road warrier could
> connect IN to it.

The key to issues like these is showing the customer what your hourly
rate is, compared to a montlhy subscription to a decent DSL line.
With any luck, you might be able to initiate the connection, but only
the ISP knows what else they do to their network. It's unlikely to be
pretty.

Paul