[Openswan Users] incomplete ISAKMP SA ...
openswan-users-254 at lists.lorens.org
Tue Jan 25 17:35:51 CET 2005
On Tue, Jan 25, 2005 at 02:17:50PM +0100, Lorens Kockum wrote:
> I thought that maybe "A workaround for this was added recently."
> said in March 2004 might not have made it into 2.2.0, so I've
> upgraded to 2.3.0.
In fact it seems that a patch made it into openswan 1 in March
Still there in last version 1.66.
In the corresponding place in openswan 2, there is a big ifdef
for nat traversal which would authorize the PIX if
st->hidden_variables.st_nat_traversal & NAT_T_WITH_PORT_FLOATING
I don't use NAT. Maybe the PIX uses it for other tunnels than
mine, or maybe my tunnel is natted on the PIX side of things.
I'll try enabling NAT traversal with some kind of static same-IP
non-translation . . .
#include <std_disclaim.h> Lorens Kockum
More information about the Users