RE: Remote access from NAT domains

[Claudio Lordello <claudio.lordello@xxxxxxxxxxxxxx>]

Yes but only in the RSA-IP case. The RSAP-IP case (counterpart of NAPT)
still does not allow encryption, right?

Any ideas how common is NAPT?

Claudio Lordello.

> -----Original Message-----
> From:	Mike Borella [SMTP:Mike_Borella@xxxxxxxxxxx]
> Sent:	Friday, April 14, 2000 1:18 PM
> To:	Scott G. Kelly
> Cc:	W. Mark Townsley; Jim Tiller; ietf-ipsra@xxxxxxxx
> Subject:	Re: Remote access from NAT domains
> 
> 
> 
> I believe that the Linux NAT guesses SPI to host mappings. Supposedly this
> works reasonably well in some situations, though it is admittedly not
> robust.
> 
> And there always is RSIP, which allows translation transparency and IPSEC
> at the
> cost of
> a little more work on the part of the host and gateway.
> 
> -Mike
> 
> 
> 
>