summaryrefslogtreecommitdiff
path: root/testing/tests/ikev2/double-nat-net/description.txt
blob: ff09155f6ebad40a1888352abbb7742a5f5af373 (plain)
1
2
3
4
5
6
7
The roadwarrior <b>alice</b> sitting behind the NAT router <b>moon</b> sets up a
tunnel to the subnet hiding behind the NAT router <b>sun</b>. All IKE and ESP traffic
directed to the router <b>sun</b> is forwarded to the VPN gateway <b>bob</b>
using destination NAT.  UDP encapsulation is used to traverse the NAT routers.
<b>leftfirewall=yes</b> automatically inserts iptables-based firewall rules that
let pass the tunneled traffic. In order to test the double NAT-ed IPsec
tunnel <b>alice</b> pings the inner IP address of the router <b>sun</b>.