ipsec and nat - Network

This is a discussion on ipsec and nat - Network ; I have a situation like this: Win2K natted client : 10.10.10.2 Windows 2003 Server with ISA 2004 : 10.10.10.1 and x.x.x.x (public address) Win2K with public adresss: y.y.y.y I need to make an ipsec policy for netbios and telnet traffic ...

+ Reply to Thread
Results 1 to 4 of 4

Thread: ipsec and nat

  1. ipsec and nat

    I have a situation like this:

    Win2K natted client : 10.10.10.2
    Windows 2003 Server with ISA 2004 : 10.10.10.1 and x.x.x.x (public
    address)

    Win2K with public adresss: y.y.y.y

    I need to make an ipsec policy for netbios and telnet traffic going from
    10.10.10.2 to y.y.y.y but I don't know how.
    I guess the problem is beacuse ipsec cannot be natted but ISA 2004 is
    supposed to have a NAT-T feature to make it work.
    Any help would be appreciated.

    Piotr








  2. Re: ipsec and nat

    IPsec *can* be natted if you are using ESP and the NAT-T fixes. I do not
    recall whether Win2k can use NAT-T however....


    "Piotr" wrote in message
    news:epNLFnG5FHA.2364@TK2MSFTNGP12.phx.gbl...
    >I have a situation like this:
    >
    > Win2K natted client : 10.10.10.2
    > Windows 2003 Server with ISA 2004 : 10.10.10.1 and x.x.x.x (public
    > address)
    >
    > Win2K with public adresss: y.y.y.y
    >
    > I need to make an ipsec policy for netbios and telnet traffic going from
    > 10.10.10.2 to y.y.y.y but I don't know how.
    > I guess the problem is beacuse ipsec cannot be natted but ISA 2004 is
    > supposed to have a NAT-T feature to make it work.
    > Any help would be appreciated.
    >
    > Piotr
    >
    >
    >
    >
    >
    >
    >




  3. Re: ipsec and nat

    Steve Clark [MSFT] :

    >I do not recall whether Win2k can use NAT-T however....


    If it is Win2kPro, yes.

    --
    Simplius

  4. Re: ipsec and nat

    Actually it is Win2k Server.
    Should those fixes be installed on all computers or only on that natted one
    ?

    Piotr

    Uytkownik "Simplius" napisa w wiadomoci
    news:s782n199uf9thshuccf70gboe9dgpkook9@4ax.com...
    > Steve Clark [MSFT] ?Oe? O? :
    >
    > >I do not recall whether Win2k can use NAT-T however....

    >
    > If it is Win2kPro, yes.
    >
    > --
    > Simplius




+ Reply to Thread