|
![](/i/fill.gif) |
Orchid XP v8 wrote:
> I thought I saw somewhere that OpenVPN *does* work with NAT, but IPSec
> doesn't. (Because NAT involves packet modification, which IPSec is
> obviously designed to prevent.)
No, what they said was that if you want IPSec to work with NAT, you had
to exclude the IP addresses from the hash calculation with a
configuration. Since OpenVPN never even offers the opportunity to
include the IP addresses, it's "simpler" and therefore more secure.
Huh?
--
Darren New / San Diego, CA, USA (PST)
Helpful housekeeping hints:
Check your feather pillows for holes
before putting them in the washing machine.
Post a reply to this message
|
![](/i/fill.gif) |