Re: PPTP and NAT

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 07/26/04


Date: Mon, 26 Jul 2004 22:42:47 +0200

Yes, this works. PPTP doesn't have any problem with this. IPSec has problems
with NAT -- but even that has been solved with NAT-T.

Mike

"TwistedPair" <twistedpair@mail.com> wrote in message
news:uUrnSB1cEHA.3616@TK2MSFTNGP10.phx.gbl...
> Hi All,
> Here is the scenario:
>
> PPTP Server -> Firewall -> Internet -> Firewall -> Client
> 192.168.x.x
> 192.168.y.y
>
> I want to be able to NAT PPTP from one internal net to another after it
had
> been NAT'ed to and from the Internet. Can this protocol cope with this
> scenario?
>
> Thanks,
> Pair
>
>



Relevant Pages

  • Re: PPTP and NAT
    ... The "second" NAT is occuring on the *decapsulated* traffic ... after it is no longer part of the VPN Session. ... > Here is the scenario: ... > I want to be able to NAT PPTP from one internal net to another after it ...
    (microsoft.public.windows.server.networking)
  • Re: AD & NAT
    ... scenario outlined above is most common though and should be able to be ... We cant avoid this NAT. ... The real IP at the three datacentre for DCs is 10.x.x.x. ... The client desktops at all locations would be having ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD & NAT
    ... We cant avoid this NAT. ... The real IP at the three datacentre for DCs is 10.x.x.x. ... The client desktops at all locations would be having ... We would like to know how can we proceed in such a scenario or what are the ...
    (microsoft.public.windows.server.active_directory)
  • Re: PPTP VPN using MPD behind NAT help needed
    ... Because PPTP encapsulates PPP ... Some router conqurs this problem by simply "passing ... Pass Through") assuming there is only one PPTP client behind NAT. ... which is capable of handling GRE over NAT with many clients. ...
    (freebsd-net)
  • PPTP VPN pass-thru
    ... it doesn't support PPTP VPN ... didn't encrypt or integrity-check the TCP/UDP headers themselves, so NAT ... so would break the protocol. ...
    (uk.comp.sys.mac)