[Openswan Users] Re: Major Trouble with x.509 certificates and XP Client

[Paul Wouters]

On Fri, 18 Jun 2004, Leonard Tulipan wrote:

[certs]
 
> Looks, good doesn't it?

Yes.

> I still suspect the windows-side to send something wrong.
> Or could it really be iptables, when VPN  already works with PSK?

If it works with PSK, then it shouldn't be a firewall issue, unless
you change more (eg also not use nat_traversal)

> What ports need to be open for NAT-Traversal?

port 4500 udp
 
Paul