IPSEC NAT-T

i was hoping someone can just clear this up for me:

i want to set up a vpn and allow roaming users to connect.

the roaming users will ALL be connecting to the internet via a standard home type NAT broadband router(i.e users will be connecting from behind a firewall and don't have a public IP). They will be using SafeRemote which i know supports NAT-T. The VPN router at the work end does have a direct connection to the internet(it has a static public IP address).

so my question is, what devices need to support NAT-T for this to work? ...from my understanding only the client software(SafeRemote) and the work VPN router needs to support NAT-T ..is this correct? ....or does the home users broadband router have to support NAT-T too?



nutterxAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

naveedbCommented:
NAT-T works by autodecting NAT device between VPN server and VPN Client. So, to answer your question, Yes, only the client and server need to support NAT-T. The router at user end does not have to.

Having said that, there are some security concerns over NAT-T. Check the following articles.

http://support.microsoft.com/default.aspx?scid=kb;en-us;885348

http://www.computerworld.com/securitytopics/security/story/0,10801,102985,00.html

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.