Don Stokes wrote :
>
>
>
> rob.edkins@axon.co.nz wrote:
> >> Well, I'm happily sitting behind an M10 talking over Securemote now
> >> too. And y'know what? I *didn't* need a pinhole.
> >>
> >Hi Don, are you using IKE with ESP or AH?
>
> IKE w/ ESP. AH includes the IP addresses in the checksum (computed
> before encryption) so any kind of NAT irreversibly breaks AH. ESP
> is fine.
>
Hmmm...well, mine definitely wouldn't work on the Nokia Firmware 5.1.3, and
didn't appear to on 5.3.0 until I created the pinhole.

I'm using Securemote V 4.1 DES, Build 4118.

On the other hand, as mentioned previously, I was having problems getting
Securemote to bind to Ethernet with DHCP, so perhaps that was a contributor
to my original problem.

Guess I'll turn off the pinhole and see what happens.

Rob

This message is part of the NZ Broadband mailing list.
see http://freebsddiary.cx/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to majordomo@freebsddiary.cx
with "unsubscribe adsl" in the body of the message
Received on Fri Jun 9 08:08:56 2000