On Fri, 12 Jun 2009, Hans Rosenfeld wrote:
Could you use IPsec in transport mode and use a gif tunnel over that? IIRC I read somewhere that this is functionally the same as IPsec tunnel mode, and it would allow you to use NAT on the gif interface.
I've ventured in this direction, with gre instead of gif. See my other mail for the results... - Hubert