Subject: Re: ipsec after nat To: Mipam <> From: None <> List:
tech-net Date: 01/13/2001 15:32:31 >Okay, clear it is. >But
then, one question about the example placed here: >Traffic from
to and vice versa is being encrypted this >way. Internally they
use the 10 address space and no natting is done >here. But are
these machines from the internal network supposed to reach >the
internet and receive traffic back (not using ipsec) cause in
that >case natting needs to be done for the internal addresses.
>Or is natting only done in case traffic is destined/comming
from addresses >other then >Or was this example just for a
leased line between those networks?          in the above
example, outbound IPsec operation will be performed only
for packets between ->  so if someone in tries to contact global
address (like         IPsec will do nothing about the packet.
if you want NAT to         take place, that's your choice. ->
IPsec takes place -> some other address IPsec won't take place
(if you do NAT, that's fine go ahead)          of course t