topic Re: VPN with NAT! in Operating System - Linux

VPN with NAT!

ajay_25 — Thu, 14 Jul 2005 20:16:27 GMT

all my pcs in my HQ are configured with private ip addresses. my DSL router only have public ip. all my branch offices also have the same configuration (one public ip with nat).

now i want to configure VPN connection from HQ to branch office.

is it possible to configure VPN with NAT?

any suggestion from u guzs will highly appreciated.

Re: VPN with NAT!

Stuart Browne — Thu, 14 Jul 2005 22:26:36 GMT

Do you intend to do the VPN's in your router boxes, or from individual PC's?

Or were you planning on putting a Linux box (or some VPN device) at each location to do the VPN implementation for you?

Re: VPN with NAT!

Ivan Ferreira — Fri, 15 Jul 2005 05:50:22 GMT

VPN with NAT is possible but with a lot of restrictions and Warnings, you should carefully read this document, tha NAT-T section:

http://www.jacco2.dds.nl/networking/freeswan-l2tp.html

For a general introduction see, and how to get arround NAT:

http://www.linuxjournal.com/article/7881

Re: VPN with NAT!

steven Burgess_2 — Fri, 15 Jul 2005 06:22:21 GMT

Hi

The easiest resolution for this is to purchase a cisco PIX router and use the cisco client cd's. The configuration is straightforward and you are not messing about with mixed vendor products which I have found is a nightmare. The client configuration is simple and hassle free

VPN and NAT is supported coming from the inside to the outside interfaces.

You can pick one up relatively cheaply (Â£150 ish) on ebay.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_book09186a0080172852.html

HTH

Steve

Re: VPN with NAT!

Patrick Terlisten — Fri, 15 Jul 2005 07:27:37 GMT

Do you want to build a site-2-site or client-2-site vpn? Is the public ip a static ip or dynamich ip?