> can IPSEC VPN work over nat? even freebsd-freebsd case. > > I cannot find any tutorial how to do this. > > > -ishYou must forward udp/4500 to the host and IPSec will negotiate a tunnel successfully. usually i cannot do it when being over nat that isn't under my control