From: Chen G. <axi...@gm...> - 2006-09-11 09:00:03
|
so , can you give me some help do handle subnet overlap issues? or some url pls On 9/11/06, VANHULLEBUS Yvan <va...@fr...> wrote: > > On Mon, Sep 11, 2006 at 04:18:43PM +0800, Chen Guoqiang wrote: > > 3) Do NAT so that each side see the remote network with a different IP > > netblock. > > > > it seems that openswan create an ipsec interface, iptables can > netmap(nat) > > to a virtual subnet first and then package to esp packets, on the remote > > endpoint, it unpackage them first and then netmap to the original ip > > address. > > > > in raccoon, we donnot have the ispec interfaces, i cannot do netmap(nat) > > first :( > > This is not a racoon issue, but a kernel implementation issue.... > > > Yvan. > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job > easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Ipsec-tools-devel mailing list > Ips...@li... > https://lists.sourceforge.net/lists/listinfo/ipsec-tools-devel > |