From owner-IPv6-jp@jp.freebsd.org  Wed Aug 12 12:10:07 1998
Received: (from daemon@localhost)
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) id MAA02423;
	Wed, 12 Aug 1998 12:10:07 +0900 (JST)
	(envelope-from owner-IPv6-jp@jp.FreeBSD.org)
Received: from titanium.yy.ics.keio.ac.jp (titanium.yy.ics.keio.ac.jp [131.113.47.73])
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) with ESMTP id MAA02418
	for <IPv6-jp@jp.freebsd.org>; Wed, 12 Aug 1998 12:10:05 +0900 (JST)
	(envelope-from sanpei@yy.cs.keio.ac.jp)
Received: from lavender.sanpei.org (u2218.seaple.icc.ne.jp [203.140.42.218])
	by titanium.yy.ics.keio.ac.jp (8.8.8+3.0Wbeta13/3.6W) with ESMTP id MAA23660
	for <IPv6-jp@jp.freebsd.org>; Wed, 12 Aug 1998 12:10:02 +0900 (JST)
Received: (from sanpei@localhost)
	by lavender.sanpei.org (8.8.7/3.6W) id MAA01924;
	Wed, 12 Aug 1998 12:10:27 +0900 (JST)
Message-Id: <199808120310.MAA01924@lavender.sanpei.org>
To: IPv6-jp@jp.freebsd.org
In-Reply-To: Your message of "Tue, 11 Aug 1998 23:27:23 +0900"
References: <608.902845643@coconut.itojun.org>
X-Mailer: Mew version 1.70 on Emacs 19.28.1 / Mule 2.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Date: Wed, 12 Aug 1998 12:10:27 +0900
From: MIHIRA "Sanpei" Yoshiro <sanpei@yy.cs.keio.ac.jp>
Reply-To: IPv6-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+980729
X-Sequence: IPv6-jp 152
Subject: [IPv6-jp 152] Re: IPsec with NAT(IP masquerade) 
Errors-To: owner-IPv6-jp@jp.freebsd.org
Sender: owner-IPv6-jp@jp.freebsd.org

  IPsec with NAT $B$NOC$"$j$,$H$&$4$6$$$^$9(B.

  $BB>$N%Q%?!<%s$G$9(B:
	o Security Gateway $B$N0lJ}$O(B static $B$K(B global IP $B$r;}$A(B(host A)
	o $B$b$&0lJ}$,(B, dial-up $B$G(B, $BF0E*$K(B global IP $B$,JQ$k(B(host B)

  $B$3$N>l9g(B, host B $B$N(B global IP $B$r$J$s$i$+$NJ}K!$G(B, $B@\B3Kh$K(B host A 
$B$KDLCN$7$F$"$2$J$$$H(B, $B$d$C$Q$j$@$a$J$N$G$7$g$&$+(B?
  setkey $B$N0z?t(B(?) $B$G$b(B, $BBP8~(B host $B$N(B global IP $B$,I,?\$N$h$&$J$N$G(B, 
$B$d$O$j(B host A $B$b$A$c$s$H(B host B $B$N(B global IP $B$rCN$kI,MW$,$"$k$h$&$G(B
$B$9$,!D!D(B

  $B@lMQ@~0z$1$H$$$&?@$N$*9p$2$G$7$g$&$+(B :-)

----------
  kame $B$N(B page $B$rFI$s$G$$$k$H(B, IPv6 $B$J$i$P(B, NAT $B$O$$$i$J$$$H=q$+$l$F(B
$B$$$^$7$?$,(B[1].
  $B8=:_$N(B dial-up $B$N>l9g(B, $B$b$i$($k(B global IP address $B$O0l$D$G$9(B. IPv6 
$B$K$J$C$F$b(B, $B0l$D$@$H;W$&$N$G$9$,(B. $B$=$&$9$k$H(B, $B$d$O$j(B NAT $B$OI,MW$@$H(B
$B;W$$$^$9$,(B. $B$I$&$J$N$G$7$g$&$+(B?

# IPv6 $B$N(B dial-up $B$N7ABV$r>\$7$/CN$i$J$$$N$G$9$,!D(B ^^;

[1] NAT is NOT necessary for IPv6 security
http://www.kame.net/newsletter/19980807/

sanpei
