[ previous ] [ next ] [ threads ]
 
 From:  George Farris <farrisg at mala dot bc dot ca>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] NAT and VPN - chicken and egg
 Date:  Tue, 10 Jan 2006 10:51:21 -0800
On Tue, 2006-10-01 at 13:45 -0500, Chris Buechler wrote:
> On 1/10/06, George Farris <farrisg at mala dot bc dot ca> wrote:
> > When setting up a VPN and with the firewall set to NAT all LAN traffic
> > to the WAN address, does the NAT happen before traffic goes out across
> > the VPN?
> >
> 
> No.  The traffic crosses the VPN without hitting NAT.

Ah, this explains why the Cisco box works then.  Apparently they can NAT
before going through the vpn which means you can effectively have
identical subnets on both ends.  Too bad Monowall can't do this but...

Thanks

-- 
George Farris   farrisg at mala dot bc dot ca
Malaspina University-College