[Openswan Users] Road warrior issue

Paul Wouters paul at xelerance.com
Thu Sep 1 05:05:53 CEST 2005


On Wed, 31 Aug 2005, Thiago Campos wrote:

> Now i got a different error
>
> Aug 31 19:03:33 beetle pluto[10948]: packet from 192.168.0.11:500: ignoring 
> Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
> Aug 31 19:03:33 beetle pluto[10948]: packet from 192.168.0.11:500: ignoring 
> Vendor ID payload [FRAGMENTATION]
> Aug 31 19:03:33 beetle pluto[10948]: packet from 192.168.0.11:500: received 
> Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port 
> floating is off

You do not have NAT-T support. Either you kernel does not support it, or
you do not have the nat_traversal= and virtual_private lines in config setup.

> Aug 31 19:03:34 beetle pluto[10948]: "t4wroad" #2: cannot respond to IPsec SA 
> request because no connection is known for 
> 192.168.0.2:17/1701...192.168.0.11:17/1701

This is the result, because nat is rejected.

Paul


More information about the Users mailing list