Hi list...<div><br></div><div>I have two linux box(openswan 2.6.23,kernel 2.6.28.9),both behind firewall(this might be a problem?),i used these two to build a network-to-network connection.</div><div>it seems that the ipsec tuunel is up,route is set.but if i ping from one box to another,no icmp result !<br clear="all">
<br></div><div>I set nat_traversal=yes in /etc/ipsec.conf,when i start up a connection use command:</div><div><br></div><div>ipsec auto --up CONNECTION</div><div><br></div><div>it says:</div><div><br></div><div>NAT-Traversal: Only 0 NAT-D - Aborting NAT-Traversal negotiation.</div>
<div><br></div><div>But the two linux box is really behind a firewall,i don't know why openswan say "Only 0 NAT-D",anyone knows what mechanism is used to detect if ourself is nated or not?</div><div><br></div>
<div>-- <br>from Romeo<br>
</div>