[Openswan Users] Problem with NAT-T

[CDL_FM]

Hi list, before to start sorry by my bad english.

I have a problem with the next diagram for vpn with openswan, i'cant finish
pluto negotiation (die en 3 fase). I has used NAT-T.
Have Kernel 2.6.9 + netkey + openswan lastversion.
The conf for safenet is the recommended in the papers from openswan.
Safenet with public IP (dialup) is working ok.
I´can undestand why172.16.25.113 start negotiation with 200.3.123.19 but
has´t finished.

Can you help me.


172.26.24.113-----200.3.123.19------200.3.123.1 ==========
200.4.124.1-----200.4.124.19-----172.16.25.113
Private IP L            Public ip firewall L    public ip router L
Public ip router R      Public ip firewall R     Private IP R
                              Openswan-NAT
NAT                          Safenet