[Openswan Users] UDP encapsulation

Paul Wouters paul at xelerance.com
Wed May 2 10:29:24 EDT 2007

On Wed, 2 May 2007, steve.morard at epfl.ch wrote:

> I'm trying to use UDP encapsulation to avoid that my packets get blocked by a
> firewall. Unfortunately, as I said in another post, it isn't working.
> My question is to know how would openswan react if I use the options
> forceencaps=yes and nat_traversal=yes and that the gateway to which I want to
> connect didn't support this option. Would the IKE negotiation still ends
> succesfully and by default won't use UDP encapsulation or would the IKE
> negotiation fail ?

Both ends need to agree on the option to get enabled. If the remote end
does not support nat-t, forceencaps won't help you.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list