[fw-wiz] VPN Gateway And Nat

From: LE CORVIC Y InfoEdpEtcDep (Yoann.Le-Corvic@socgen.com)
Date: 02/21/03

  • Next message: Thomas H. Ptacek: "Re: [fw-wiz] DNS Extensions and Firewalls" 
    From: LE CORVIC Y InfoEdpEtcDep <Yoann.Le-Corvic@socgen.com>
To: "'firewall-wizards@honor.icsalabs.com'" <firewall-wizards@honor.icsalabs.com>
Date: Fri, 21 Feb 2003 16:44:47 +0100

    Hi All,
     
    I have a slight problem with a VPN configuration, and wanted to know if you
    all can help. Basically, here is the situation :
     
    PROTECTED_NET-------VPNGATEWAY --------ROUTER-----ClientSecuremote
     
    The public IP Adress of the VPN GATEWAY is natted at the ROUTER, so that the
    ClientSecuremote doesn't access the real IP Adress of the VPNGATEWAY, but
    one on the ROUTER.
     
    The intiation sequence works, and the authentication as well, be when the
    network topology is downloaded, no access is possible on servers of the
    PROTECTED_NET.
     
    I suspect that after topology download, the real IP Adress of the gateway is
    given to ClientSecuremote, which uses it for the remaining of the
    communication.
     
    Is there a way to go around that problem, or is it a lost cause... ?
     
    Thanks for your help.
    *************************************************************************

    Ce message et toutes les pieces jointes (ci-apres le "message") sont
    confidentiels et etablis a l'intention exclusive de ses destinataires.
    Toute utilisation ou diffusion non autorisee est interdite.
    Tout message electronique est susceptible d'alteration.
    La SOCIETE GENERALE et ses filiales declinent toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie.

                                    ********

    This message and any attachments (the "message") are confidential and
    intended solely for the addressees.
    Any unauthorised use or dissemination is prohibited.
    E-mails are susceptible to alteration.
    Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.

    *************************************************************************
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards