On Wed, May 09, 2007 at 02:51:35PM +0200, Michael wrote:

quoted text
> Now, as I understand it, it isn't possible to create an IPsec connection

> from a single host within a NATed network to an external server but

> OpenVPN works great here. Please correct me if I am wrong. (I have no

> access to the NAT router here.)

If the router allows UDP traffic on ports 500 and 4500, isakmpd will

fall back to NAT-traversal automatically if it decides it's necessary.