[Openswan Users] Debian 2.6.8 NAT-T not supported by kernel

Lewis Shobbrook lshobbrook at fasttrack.net.au
Fri Aug 20 13:13:35 CEST 2004


Hi All,

Just installed a new 2.6.8 kernel and discovered something unusual.

NAT-T support lists in the suth.log as not supported, where as 2.6.7 was
no issue.

Aug 20 11:16:50 fatswan pluto[30870]: Starting Pluto (Openswan Version
2.1.3 X.509-1.4.8-1 PLUTO_USES_KEYRR)
Aug 20 11:16:50 fatswan pluto[30870]:   including NAT-Traversal patch
(Version 0.6c)
Aug 20 11:16:50 fatswan pluto[30870]: Using Linux 2.6 IPsec interface
code
...
Aug 20 11:16:52 fatswan pluto[30870]: NAT-Traversal: ESPINUDP(1) not
supported by kernel -- NAT-T disabled
Aug 20 11:16:52 fatswan pluto[30870]: adding interface lo/lo ::1
Aug 20 11:16:52 fatswan pluto[30870]: NAT-Traversal: ESPINUDP(2) not
supported by kernel -- NAT-T disabled
Aug 20 11:16:52 fatswan pluto[30870]: adding interface lo/lo ::1:4500

I've not had a chance to test this further as yet, but it doesn't look
too good.

Anyone else know anything or had a chance to look at 2.6.8 yet? 

Cheers,

Lewis Shobbrook


More information about the Users mailing list