Re: IPSec Passthrough

[Francis Dupont <Francis.Dupont@enst-bretagne.fr>]

 In your previous mail you wrote:

   I'm curious on how IPSec passthrough works.  I know AH prevents a
   traditional NAT from occurring, but how do the SOHO routers (Linksys,
   D-Link, Ascend, etc) accomplish the IPSec passthrough?

=> I know at least one of the cited SOHO routers which just puts
on the "other side" any packet with an "unknown" protocol when
the IPsec passthrough is enabled (i.e., it behaves like a bridge).
It is a bit surprising but convenient for my usage (IPv6 over IPv4
passthrough). But some others seem to be "smart", i.e., they believe
they know IPsec and try to do "clever" things, for instance they
try to support many IPsec "clients", including of the same VPN.

Regards

Francis.Dupont@enst-bretagne.fr