ESP can be routed over NAT, just not AH. Remember, NAT changes every packet by modifying the header and when IPsec examines the packet it will discard any one's which have been tampered with. ESP just encrypts the payload which NAT is not concerned with. Just turn off AH authentication and you...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.