IPsec *can* be natted if you are using ESP and the NAT-T fixes. I do not
recall whether Win2k can use NAT-T however....


"Piotr" wrote in message
news:epNLFnG5FHA.2364@TK2MSFTNGP12.phx.gbl...
>I have a situation like this:
>
> Win2K natted client : 10.10.10.2
> Windows 2003 Server with ISA 2004 : 10.10.10.1 and x.x.x.x (public
> address)
>
> Win2K with public adresss: y.y.y.y
>
> I need to make an ipsec policy for netbios and telnet traffic going from
> 10.10.10.2 to y.y.y.y but I don't know how.
> I guess the problem is beacuse ipsec cannot be natted but ISA 2004 is
> supposed to have a NAT-T feature to make it work.
> Any help would be appreciated.
>
> Piotr
>
>
>
>
>
>
>

Steve Clark [MSFT] ÝÐßØèÐ ÒÞ :

>I do not recall whether Win2k can use NAT-T however....

If it is Win2kPro, yes.

--
Simplius

Actually it is Win2k Server.
Should those fixes be installed on all computers or only on that natted one
?

Piotr

U¿ytkownik "Simplius" napisa³ w wiadomoœci
news:s782n199uf9thshuccf70gboe9dgpkook9@4ax.com...
> Steve Clark [MSFT] Ý?ßOe? O? :
>
> >I do not recall whether Win2k can use NAT-T however....
>
> If it is Win2kPro, yes.
>
> --
> Simplius