topic VPN question in Operating System - HP-UX

VPN question

SM_3 — Fri, 29 Apr 2005 12:03:46 GMT

Hello

I have read on the internet that Ipsec AH (authentication Header) will work with NAT traversal using UDP port 4500.

But then some poeple state, "IPSec Header Authentication would not work through a NAT device."

What do you reckon guys?

Thanks.

Re: VPN question

marie-noelle jeanson_1 — Fri, 29 Apr 2005 13:28:59 GMT

Hi,

One manual for IP Filter, http://docs.hp.com/en/B9901-90014/B9901-90014.pdf says p.104 that IPSec and NAT are not compatible. If you are using HP-UX IPFilter with IPSec, do not use NAT functionality.
Then it looks like IPsec will not work with NAT.

Marie-Noelle

Re: VPN question

Tim Sanko — Thu, 05 May 2005 07:38:49 GMT

Depending on which VPN in question and how it is configured, it can allow different ports through and not others. We don't allow XDMP across the VPN, but we do allow telnet.
This works with a firewall pacage and I get nauseated dealing with it...

Tim