xauth should, but doesn't. I spent days on it. I have no clue on which side of the equation the crux of the issue resides, but trust me when I say it doesn't work with Sonicwall. Or, at least, it didn't the last time I tried with the configuration and version of Sonicwall's OS listed in my post linked to earlier. I no longer manage those firewall's, so I can't test any further.
<br><br><br><div><span class="gmail_quote">On 10/3/07, <b class="gmail_sendername">Paul Wouters</b> <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Wed, 3 Oct 2007, Aaron Kincer wrote:<br><br>> Geez. I forgot that xauth ALSO caused that error. Been a while since I went<br>> down that road.<br>><br>> xauth on Sonicwall does not play well with Openswan. I spent a long time
<br>> trying to get it to work, but never could. I shut it off and it worked.<br>><br>> If turning of xauth fixes it, try turning DHCP back on and see if that works<br>> for you. It didn't for me.<br><br>Openswan does not support "dhcp over vpn". It's a standard that was never
<br>implemented by any major parties. XAUTH should work.<br><br>IKEv2 is supposed to address those short comings.<br><br>Paul<br></blockquote></div><br>