Re: [cobalt-users] NAT Traversal for VPN

[Peter Low <peterlow@xxxxxxxxxxxxxxxxxx>]

At 11:50 AM 2/20/03 -0600, you wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> At 12:37 PM 2/20/2003 -0500, Peter Low wrote:
> >We have a guest in our office who needs to have access to his company's
> >VPN.  We have a Qube doing NAT and DHCP.  Apparently, NAT and VPN don't mix.
> >
> >Does anyone have any ideas on allowing our guest to get VPN access through
> >the NAT setup?  I've done some looking into NAT traversal, but have not
> >found specific directions.  Is it possible to do port forwarding or
> >exclude his port from NAT or something?
>
> Peter,
>
> Who's VPN product is this guest using? Several have methods for enabling
> UDP wrapping of VPN traffic specifically so that it can pass through the
> NAT with no changes to the NAT. Depending on who's VPN product it is, I
> might be able to help.
>
> Charlie

I believe it's the Windows VPN client and a Windows 2000 server.  SafeNet 
(who licenses the client to Microsoft) claims to support NAT traversal via 
UDP wrapping (per the draft rfc).  But, I have not found any information 
about whether the Windows 2000 sever supports NAT traversal.  If it does 
not, I need to see if there is a workaround.

Thanks again,

Peter