From owner-IPv6-jp@jp.freebsd.org  Wed Aug 12 12:36:38 1998
Received: (from daemon@localhost)
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) id MAA03796;
	Wed, 12 Aug 1998 12:36:38 +0900 (JST)
	(envelope-from owner-IPv6-jp@jp.FreeBSD.org)
Received: from coconut.itojun.org (root@coconut.itojun.org [210.160.95.97])
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) with ESMTP id MAA03791
	for <IPv6-jp@jp.freebsd.org>; Wed, 12 Aug 1998 12:36:36 +0900 (JST)
	(envelope-from itojun@itojun.org)
Received: from localhost (itojun@localhost.itojun.org [127.0.0.1])
	by coconut.itojun.org (8.8.8+3.0Wbeta12/3.6W) with ESMTP id MAA09812
	for <IPv6-jp@jp.freebsd.org>; Wed, 12 Aug 1998 12:36:32 +0900 (JST)
To: IPv6-jp@jp.freebsd.org
In-reply-to: sanpei's message of Wed, 12 Aug 1998 12:10:27 JST.
      <199808120310.MAA01924@lavender.sanpei.org> 
X-Template-Reply-To: itojun@itojun.org
X-Template-Return-Receipt-To: itojun@itojun.org
X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD  90 5F B4 60 79 54 16 E2
From: Jun-ichiro itojun Itoh <itojun@iijlab.net>
Date: Wed, 12 Aug 1998 12:36:32 +0900
Message-ID: <9808.902892992@coconut.itojun.org>
Reply-To: IPv6-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+980729
X-Sequence: IPv6-jp 153
Subject: [IPv6-jp 153] Re: IPsec with NAT(IP masquerade) 
Errors-To: owner-IPv6-jp@jp.freebsd.org
Sender: owner-IPv6-jp@jp.freebsd.org


>  $BB>$N%Q%?!<%s$G$9(B:
>	o Security Gateway $B$N0lJ}$O(B static $B$K(B global IP $B$r;}$A(B(host A)
>	o $B$b$&0lJ}$,(B, dial-up $B$G(B, $BF0E*$K(B global IP $B$,JQ$k(B(host B)
>  $B$3$N>l9g(B, host B $B$N(B global IP $B$r$J$s$i$+$NJ}K!$G(B, $B@\B3Kh$K(B host A 
>$B$KDLCN$7$F$"$2$J$$$H(B, $B$d$C$Q$j$@$a$J$N$G$7$g$&$+(B?

	$B$=$b$=$b!"(B(global$B$K$D$J$,$C$F$$$k(B)site A$B$N$J$+$K(Bprivate address$B$N(B
	$B7PO)$r$D$C$3$^$J$$$H0J2<$N?^$O@.N)$7$J$$$N$G!"$a$s$I$/$5$$$H(B
	$B;W$$$^$9!#7PO)$,1L$l$?$i$*$3$i$l$=$&$@$7!#(B

>  setkey $B$N0z?t(B(?) $B$G$b(B, $BBP8~(B host $B$N(B global IP $B$,I,?\$N$h$&$J$N$G(B, 
>$B$d$O$j(B host A $B$b$A$c$s$H(B host B $B$N(B global IP $B$rCN$kI,MW$,$"$k$h$&$G(B
>$B$9$,!D!D(B

	site B$BF~8}$N(BNAT router$B$r$+$aH"$K$G$-$J$$$N$G$7$g$+!#$=$l$J$i$^$@>/$7$O(B
	$B5_$$$,$"$j$^$9$,!#(B
	$B$?$@$7!"$$$^$N$H$3$m%+!<%M%k$A$g$$$HD>$5$J$$$H$@$a!#(B

	[[site A]] -- gw A ======== gw B -- [[site B]]
				    (NAT)	private address

itojun
