ansible-ipsec icon indicating copy to clipboard operation
ansible-ipsec copied to clipboard

Published 20 hours ago • verified publisher icon kravietz

Support for NAT-ed environments?

Open saurabhnanda opened this issue 5 years ago • 1 comments

If some servers are inside EC2 and some are outside EC2, the configuration generated by this Ansible role does not work. I think it is because EC2 servers are sitting inside a NAT-ed environment.

If you can tell me how to set this up, I can raise a PR to implement this.

saurabhnanda avatar Mar 03 '19 09:03 saurabhnanda

@saurabhnanda this should work ike keying as racoon supports NAT-T (NAT traversal) extension to IKE. In theory, it should work out of the box, but the hosts behind NAT should be always initiating the IKE connection.

kravietz avatar Mar 04 '19 16:03 kravietz