[Openswan Users] [patch] bug 393: Aggressive mode doesn't work with NAT-T, rejects NAT-D payload

[Paul Wouters]

On Wed, 14 Feb 2007, Martin Koller wrote:

> I'm using openswan-2.4.7 on Linux/2.6.18 and try to connect from home to an
> SonicWall server running on Windows in the company.
>
> This worked up till the last upgrade on the company side.
> Since then I get the following error when trying to establish the vpn
> connection:
> message ignored because it contains an unknown or unexpected payload type
> (ISAKMP_NEXT_NAT-D) at the outermost level
>
> I found the same error in the openswan bugtracking system at 393 (see
> subject).
>
> Checking the sources of openswan, I tried to solve this, and I succeeded with
> the following simple patch.

The proper fix is already in CVS and will be part of 2.4.8. I will try to
release this before the end of the week.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155