[Openswan Users] Help with ipsec/l2tpd and nat on client and server

[Jacco de Leeuw]

Chris Picton wrote:

>>>However, the server is now behind a natting gateway, which has a port
>>>forward to forward all traffic to the server.  

Actually, you only have to forward UDP ports 500 and 4500.

> When natting the server, I get the logs which are at the end (changed
> from the logs from 2.1.5).  The l2tp tunnel does not attempt to come up,
> and the ipsec connection appears to come up, but immediately, starts the
> connection again.

There are no disconnect messages? So the client sets up a large
number of connections? What does ipsec auto --status say?

> I am also seeing "udp_encap_rcv(): Unhandled UDP encap type: 1" in my
> log files.

It might be related to the RHEL3 issues:
http://lists.debian.org/debian-testing/2004/04/msg00014.html

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl