Re: IPsec vs ssh

[John Nemeth <jnemeth%cue.bc.ca@localhost>]

On Nov 11, 10:05pm, Christos Zoulas wrote:
} In article 
<201311112048.rABKmDII014127%server.cornerstoneservice.ca@localhost>,
} John Nemeth  <jnemeth%cue.bc.ca@localhost> wrote:
} >
} >     In my various tests, I've nevered had NAT-T work with either.
} >I will note that my tests were done with a Cisco router as the
} >remote endpoint.  Although not 100% certain, I believe NAT-T is
} >currently broken.
} 
} I beg to differ. I am using xl2tpd (from pkgsrc) with IPSEC/NAT-T
} to provide an L2TP gateway for my iphone and MacOS/X box and it works
} just fine (under /current). I bet android and windows are simple to
} get working too.

     This sound like the NetBSD side has a public address and is
acting as the "server".  What happens if the NetBSD side has a
private address?

}-- End of excerpt from Christos Zoulas