PF FAQ Material: Binat for Overlapping Address Space (IPSEC / VPN)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

PF FAQ Material: Binat for Overlapping Address Space (IPSEC / VPN)

Brian A. Seklecki
There should probably be an example of how to use complementary binat
statements to resolve overlapping address allocation; specifically in
traditional wired LANs, but more importantly (the most likely use of binat
anyway), Intra-organizational IPSec VPNs, or any administrative realm of
RFC1918 space assignments.

I'll put an example together.

~BAS

http://services.netscreen.com/indexcontent/ApplicationNotes/Technical/ScreenOS%204.0.0/IP-overlaps-NAT-PAT.htm

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800949f1.shtml