---------- Forwarded message ----------
From: Thomas Serra <thomas dot serra at bluewin dot ch>
Date: Mar 17, 2007 7:43 AM
Subject: RE: Fwd: [m0n0wall] does m0n0wall support IPSec pass-through?
To: apt dot get at gmail dot com


Thank you!

I'm not completely sure that NAT-T==IPSEC Pass-through, or if NAT-T
allows IPSEC Pass-through.

So 1.3b2 and supperior allows NAT-T, right?

Do you think 1.3b2 is stable enough for prod env. ?
In ou case : Firewall, VPN PPTP, and of course this NAT-T
capability.

Thank you.

Thomas.


The official answer is no, the beta version is not recommended for a
production environment. However we've been using 1.3b1 and 1.3b2 since
late December with ~200 users, pptp, traffic shaping, etc without a
hitch. Be sure to use good stable hardware though to reduce the chance
of having "issues".

db
----Message d'origine----
De: apt dot get at gmail dot com
Date: 17.03.2007 14:36
À: <m0n0wall at lists dot m0n0 dot ch>
Objet: Fwd: [m0n0wall] does m0n0wall support IPSec pass-through?

On 3/17/07, Thomas Serra <thomas dot serra at bluewin dot ch> wrote:
> Hi All,
>
> I'm facing an IPSec pass-through issue.
>
> My question is the following: does m0n0wall support IPSec pass-
> through?
>
> I couldn't find a definitive yes/no answer in the documentation.
>
> I really need to be sure of that as I need to integrate a
machine
> that's going to open an IPSEC connection from inside our LAN to
an
> external server.
>
> Our network is:
>
> -------[internet]----[ADSL modem – bridged]---[m0n0]------[LAN]
>
>
> A machine from inside our LAN needs to open an IPSEC connection
to
> a company outside our small LAN:
>
> ------[other-company] -------[internet]----[ADSL modem – bridged]
---
> [m0n0]------[LAN]
>
> Is that possible?
>
> Thank you in advance for help

*Correction: NAT-T is currently only available in the latest beta
version, 1.3b2.

db