[Openswan Users] openswan 2.4.0 & pix 515e

Paul Wouters paul at xelerance.com
Wed Oct 5 20:51:50 CEST 2005


On Wed, 5 Oct 2005, lean wrote:

> Just tried:
> leftprotoport=17/0
> rightprotoport=17/0
> but again:
> we require peer to have ID 'the_public_ip', but peer declares 
> 'the_private_one_who's_natted'
> 218 "pix" #1: STATE_MAIN_I3: INVALID_ID_INFORMATION

do you have nat traversal support? did you enable nat_traversal=yes?
did you set a virtual_prviate= ? Did you set rightsubnet=vhost:%no,%priv ?

Paul


More information about the Users mailing list