[Openswan Users] Fedoera Core and nat-t (was: hello)

[Axel Thimm]

On Fri, May 28, 2004 at 04:08:13AM +0200, Yakov Shtoots wrote:
> Hey Axel,
> 
> i hope i dont bother you i just couldnt find any place alse where to troubleshoot my problem

Ccing the openswan lists.

> im using ur package of openswan
> 
> got this 2 installed here : 
> 
> kernel-module-openswan-2.4.22-1.2188.nptl-2.1.2-11.rhfc1.at
> openswan-2.1.2-11.rhfc1.at
> 
> this is my kernel using fc1 : 2.4.22-1.2188.nptl
> 
> when trying to start openswan everything works fine except for one thing which is the NAT-T issue
> 
> this is my output :
> 
> May 28 03:45:22 ext-gw ipsec_setup: ...Openswan IPsec started
> May 28 03:45:23 ext-gw ipsec__plutorun: 003 NAT-Traversal: ESPINUDP(1) not supported by kernel -- NAT-T disabled
> May 28 03:45:23 ext-gw pluto[26314]: listening for IKE messages
> May 28 03:45:23 ext-gw pluto[26314]: NAT-Traversal: ESPINUDP(1) not supported by kernel -- NAT-T disabled
> 
> besides NAT-T everything works just fine

you are using kernel 2.4.22-1.2188.nptl which has no nat-t
support. You need

kernel-2.4.22-1.2188.nptl_48.rhfc1.at and
kernel-module-openswan-2.4.22-1.2188.nptl_48.rhfc1.at-2.1.2-11.rhfc1.at

available from

http://ATrpms.net/name/kernel/ and
http://ATrpms.net/name/openswan/

Or, if you have apt/yum, just do

apt-get install kernel-module-openswan-2.4.22-1.2188.nptl_48.rhfc1.at

and openswan kernel module and kernel will be installed together.

> Yakov.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20040528/077bf58d/attachment.bin