ipsec vpn

[Maury Cohen <maury_cohen@yahoo.com>]

Hi.  Is it possible to create an ipsec vpn between two
OpenBSD endpoints where one of the endpoints is behind
a NAT firewall, without setting up ipsec on the
firewall?

The standard model described in vpn(8) and the other
docs seems to be this:

A: my office machine with a NATd IP
B: my home firewall
fw: office firewall

[A]--[fw]-- internet ---[B]
       |______vpn________|

Unfortunately, I have no control over fw, so that vpn
design will not work for me.  What I need is this:

[A]--[fw]-- internet ---[B]
 |____________vpn________|


thanks,
Maury
Yahoo! Greetings - Send FREE e-cards for every occasion!
http://greetings.yahoo.com