4 ms·
Your NAT behaves and likely has (working) IPSEC ALG stuff, plenty of setups don't.
by throwaway2048 7y ago
Your NAT behaves and likely has (working) IPSEC ALG stuff, plenty of setups don't.
- GhettoMaestro 7y agoBullshit. If you don't have ALG/fix-ups for FTP, IPSec, etc your device sucks.
- wahern 7y agoMore likely is that both ends are using IPSec NAT-T (https://tools.ietf.org/html/rfc3947 https://tools.ietf.org/html/rfc3947), which has been widely supported for some time. NAT-T encapsulates IP packets inside UDP, with the IKE daemons (usually) as the UDP endpoints.
- throwaway2048 7y agoNAT-T is unfortunately not very reliable.