[Openswan Users] Mac OS X 10.4.3 <-> Openswan

[Paul Wouters]

On Wed, 23 Nov 2005, Jacco de Leeuw wrote:

> > the second issue I'm hoping to find information about is NAT  Traversal
> > while using OSX.  from what i can tell openswan still(?)  does not support
> > the OSX NAT-T implementation.
>
> There is some Mac support in Openswan 2.4.2 - 2.4.4 but it is not there yet.
> Peter Van der Beken's second patch is still under consideration by the
> Openswan team.

I am using MacOSX 10.4.3 behind NAT using L2TP with Openswan 2.4.4 without
NAT-T problems. Can someone who think it is still broken give me more
information and preferably logfiles?

I know rekeying doesn't work properly, but I do not think that is a MacOSX
specific issue.

> http://www.jacco2.dds.nl/networking/patches/openswan-OSX-swapNATDhashes.patch
>
> This is Peter's patch without the parts that are already in 2.4.2 - 2.4.4.
> Openswan 2.4.2 plus this patch worked for me, but I did not test it for hours
> on end. You may have to set rekey=no.

So I have the same results without that additional patch. I actually ran
bittorrent over l2tp on my mac without problems (until rekey time)

Paul