[Openswan Users] kernel 2.6 + openswan 2.4.5 = not NAT-T support

Domingo Antonio domingo at netcomp.com.br
Thu Apr 13 14:10:23 CEST 2006


Hi all,

	I have a kernel 2.6.16 and openswan 2.4.5
	I have been applied openswan-2.4.5rc7.kernel-2.6-klips.patch and
openswan-2.4.5rc7.kernel-2.6-natt.patch, but there is no NAT-T entry in
/proc/net/ipsec/natt... when i run ipsec verify commando i get FAILED in nat
traversal support...

	I need to conect on a CISCO 3000 series
	My openswan server is behind a nat server, see diagram.


[cisco network=1.1.1.0/24]
     |
     |
[cisco router =1.1.1.1 ]
     | 
     |
     |
[INTERNET]
     |
     |
     |
[NAT FIREWALL external int. 200.91.x.18 ]
[NAT FIREWALL internal int. 174.17.4.1  ]
     |
     |
     |
[OPENSWAN 174.17.4.15]

		
	I halt in STATE_QUICK_I1...

	What is happend? 
	Where is some magical skils to compila kernel with NAT-T support?



10x
Domingo



More information about the Users mailing list