<html><head><style type="text/css"><!-- DIV {margin:0px} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div>Trevor, <br><br>You kernel compiled ok and should be working fine. According to Paul:<br><br>"This check is most certainly wrong. The code for creating the proc file<br>by the nat-t patch seems to be missing from the 2.4 branch. So ignore this<br>error for now."<br><br><span>I thought I have the same problem, see: <a target="_blank" href="http://article.gmane.org/gmane.network.openswan.user/8595">http://article.gmane.org/gmane.network.openswan.user/8595</a></span><br><br>If you run netsstat -rn, yo should see openswan listening on 4500, the port for natt.<br><br>Rgds,<br>Gbenga<br><br> <xMETA http-equiv="Content-Type" content="text/html; charset=us-ascii"><xmeta name="Generator" content="Microsoft Word 11 (filtered
medium)"><style><!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:Arial; color:windowtext;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.25in 1.0in 1.25in;} div.Section1 {page:Section1;} --> </style> </xmeta></xMETA><div class="Section1"> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Is it possible that the ipsec verify on a 2.6.15.10 kernel might not report the nat traversal properly? I have rebuilt the kernel a few times, and verified the .config file has the CONFIG_IPSEC_NAT_TRAVERSAL=y. But each time I install it and reboot and run ipsec verify it just repots
back:<o:p></o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">KLIPS detected, checking for NAT Traversal support [FAILED]<o:p></o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">I suppose I could have messed up the build, but this is the 3<sup>rd</sup> run through it. And logs from the first build showed:<o:p></o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p
class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Apr 24 12:33:16 office1 pluto[5070]: | NAT-T: new mapping 64.142.7.188:500/4500)<o:p></o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Although nat_traversal=yes is set in the ipsec.conf file. So not sure if it would post that even if kernel support was not there.<o:p></o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family:
Arial;">Just want to double check before banging my head away on this kernel some more.<o:p></o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"><o:p> </o:p></span></font></p> <p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Trevor<o:p></o:p></span></font></p> </div> <div>_______________________________________________<br>Users@openswan.org<br><a target="_blank" href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</a><br>Building and Integrating Virtual Private Networks with Openswan: <br><a target="_blank" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br></div></div></div></div></body></html>