New Zealand ADSL Mailing List


Re: VPN SBS2003 RTA020

From: SPETZNAZ_at_gmail.com
Date: Wed, 11 Aug 2004 13:13:40 +1200
Message-ID: <524ebaea04081018131b0f71e2@mail.gmail.com>

If its that NAT causing the problem, consider using IPSec with NAT-T instead

IPSec NAT traversal (NAT-T), a new standard for allowing Encapsulating
Security Payload (ESP)-encapsulated traffic across one or more NATs.
IPSec NAT-T is described in the Internet drafts titled UDP
Encapsulation of IPSec Packets (draft-ietf-ipsec-udp-encaps-02.txt)
and Negotiation of NAT-Traversal in the IKE
(draft-ietf-ipsec-nat-t-ike-02.txt). IPSec NAT-T defines changes to
IPSec protocols and new Internet Key Exchange messages and payloads
that are exchanged between two IPSec NAT-T-capable peers. IPSec NAT-T
must be supported by both the client and server.

Windows Server 2003 and Microsoft L2TP/IPSec VPN Client support IPSec
NAT-T. The L2TP/IPSec NAT-T Update for Windows XP and Windows 2000
provides VPN client IPSec NAT-T support for Windows 2000 and Windows
XP. For details about this update, see the Knowledge Base article
L2TP/IPSec NAT-T Update for Windows XP and Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;818043

Cheers
Nathan Mercer

On Mon, 09 Aug 2004 22:19:24 +1200, John Morch <morchjohn@hotmail.com> wrote:
> Hi,
> Trying to get VPN going to a SBS2003 server with a RTA020. Just using
> standard XP professional laptops so its all "standard" microsoft.
> Has anybody achieved this?
> If not then what ADSL Routers has anyone used for this?
> Thanks
> John
>
> _________________________________________________________________
> There's never been a better time to get Xtra JetStream @
> http://xtra.co.nz/jetstream
>
> --
> This message is part of the NZ ADSL mailing list.
> see http://unixathome.org/adsl/ for archives, FAQ,
> and various documents.
> To unsubscribe: send mail to majordomo@lists.unixathome.org
> with "unsubscribe adsl" in the body of the message
>
>

-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message 
 
Received on Wed Aug 11 13:13:56 2004

This archive was generated by hypermail 2.2.0 : Thu Nov 30 11:48:31 2006 EST