[Openswan Users]

[Brian Candler]

On Thu, Jun 01, 2006 at 09:12:30AM -0500, Alan Peery wrote:
> What's not:
> 
>     * multiple simultaneous users behind a specific NAT firewall
> 
>         * first user gets in
>         * later users do not

The good news is that this problem has now been solved, see
http://lists.openswan.org/pipermail/users/2006-May/009487.html

The bad news is that if you want this code, it will cost you US$55,000 :-(

It will probably be cheaper for you to buy a second-hand Cisco 7204VXR and
configure it as an L2TP/IPSEC terminator. The "set nat demux" feature
supports multiple clients behind the same NAT device, or multiple clients on
the same private IP address behind different NAT devices.
http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804dfa69.html

Regards,

Brian.