說來話長
不過這裡有些結論
- NAT在路徑間改了封包內容, IPsec設計來就不想你半途改他,天性不合
- 只有ESP+tunnel mode+ALG有機會解
- 或NAT-T (基本上是架橋UDP飛過)
不過這裡有些結論
- NAT在路徑間改了封包內容, IPsec設計來就不想你半途改他,天性不合
- 只有ESP+tunnel mode+ALG有機會解
- 或NAT-T (基本上是架橋UDP飛過)
"Read, read, read. Read everything—trash, classics, good and bad, and see how they do it. Just like a carpenter who works as an apprentice and studies the master. Read! You'll absorb it" Opinions Are My Own
Comments