I stumbled across http://www.linuxhomenetworking.com/linux-adv/vpn-linux.htm today, which states that "NAT breaks VPNs".
Is this just an over-simplifying statement that really means "if you're reading this, then don't even try setting up a NAT-traversing VPN"?
Yes and no. Depends on what you mean by VPN. VPN can be implemented in many different ways. With IPSec implementation you may run into problems (some solvable, some not). With user space daemon implementations such as OpenVPN or VTun, you shouldn't have any problems. Basically it is good idea not to have VPN endpoints behind NAT (if possible, of course).
-- Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
