Hi Tony,<br><br>I'm not an expert on Openswan, but I do have experience
with it. I have enabled nat_traversal always, and it has never caused me
problems. Your problem seems to occur when you dont have it enabled. <br>
<br>OSX used to have a bug with public ip connections, where it told
Openswan that it was NAT-ed even when this was not true. This can be
solved by using some settings in ipsec.conf.<br><br>You need<br> dpddelay=10<br>
dpdtimeout=90<br> dpdaction=clear<br> for the Iphone to work.<br><br>I also have this:<br> ikelifetime=8h<br> keylife=1h<br><br>But I dont know if it is required.<br><br>You need this for l2tp tunneling<br>
type=tunnel<br> compress=no<br> disablearrivalcheck=no<br><br>Not sure about the last two, but I have them enabled.<br><br>for l2tp you need:<br> rightprotoport=17/%any<br> rightsubnet=vhost:%priv,%no<br>
forceencaps=yes<br><br>forceencaps is required for IOS, to fix
the false statement of the IOS/OSX client saying that it is NAT-ed.
Indeed this is also the case with OSX.<br><br>I hope this helps, but do notice that IPsec tunneling is not always easy.<br>
<br>Greetings,<br><br>Bart Smink<br><br><div class="gmail_quote">2013/1/8 <span dir="ltr"><<a href="mailto:tony.blue.mailinglist@gmx.de" target="_blank">tony.blue.mailinglist@gmx.de</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Am 06.01.2013 21:28, schrieb <a href="mailto:tony.blue.mailinglist@gmx.de" target="_blank">tony.blue.mailinglist@gmx.de</a>:<br>
<br>
Nobody has an idea or a tip for me?<br>
<br>
Thank you!<br>
<br>
Tony<div class="HOEnZb"><div class="h5"><br>
______________________________<u></u>_________________<br>
<a href="mailto:Users@lists.openswan.org" target="_blank">Users@lists.openswan.org</a><br>
<a href="https://lists.openswan.org/mailman/listinfo/users" target="_blank">https://lists.openswan.org/<u></u>mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/<u></u>38387/IPsec-for-Linux-made-<u></u>easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/<u></u>product/1904811256/104-<u></u>3099591-2946327?n=283155</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><span style="font-family:Calibri,sans-serif;font-size:14px;border-collapse:collapse">**** DISCLAIMER ****<br><br>"This e-mail and any attachment thereto may contain information which is confidential and/or protected by intellectual property rights and are intended for the sole use of the recipient(s) named above. <br>
Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s) is prohibited. <br>If you have received this e-mail in error, please notify the sender either by telephone or by e-mail and delete the material from any computer".<br>
<br>Thank you for your cooperation.</span>