IPSec Pass Thru Impossible?

[Anonymous]

I originally posted this under the wrong topic. Please forgive. 🙂

I’ve been up and down a million tutorials, and I haven’t seen a working example of this type of network configuration, where two machines are sitting in private networks and are trying to connect via VPN. This is an EXTREMELY common setup.

However, every IPSec example I’ve seen has the VPN server also sitting on the WAN and acting as the router.

Here’s my simple ascii diagram:

192.168.2.200 (Mac OS 10.3.2)
|
|
192.168.2.1 LAN gateway
Router w/IPSec PassThru enabled (Linksys)
17.112.152.32 WAN IP addy home
|
|
VPN tunnel over the Internet
|
|
216.109.118.74 WAN
Router w/IPSec PassThru enabled (Linksys)
192.168.1.1 LAN
|
|
192.168.1.100 (Mac OS 10.3.2)

I’ve read a lot about IPSec being incompatible with NAT. Does this make the above configuration impossible?

If so, I’d like to know. I’ve been beating on this for about a week now, with varying levels of success, and I’m not making any progress. Please help

[Anonymous]

Yes, AFAIK, your VPN server has to have a registered IP address. The VPN client can be located on a private network, but the VPN server cannot.

[Author]

Posts