[Openswan Users] Problems with Openswan 2.6.22 using Aggressive Mode and NAT-T

[Martin Schiller]

Hi!

I've got some problems with Openswan 2.6.22 using Aggressive Mode and NAT-T.

The test-scenario looks like this:

- 2 identical machines with Openswan 2.6.22 running on them
- a NAT gateway between the two machines

The problem:
"NAT-Traversal: Only 0 NAT-D - Aborting NAT-Traversal negotiation"

I think the problem is only in the responder part of the nat-t code, because when I use Openswan 
2.4.14 on the responder, everything works OK.

For more details, have a look on the attached log-files.

Aggr-NAT-T-2.6.22.log: 2.6.22 <-> 2.6.22 => FAILURE
Aggr-NAT-T-2.4.14.log: 2.4.14 <-> 2.4.14 => OK
Aggr-NAT-T-mix.log:    2.6.22 <-> 2.4.14 => OK

Regards, Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Aggr-NAT-T-mix.log
Type: application/octet-stream
Size: 4067 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20090916/a78d11e6/attachment.obj 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Aggr-NAT-T-2.4.14.log
Type: application/octet-stream
Size: 4094 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20090916/a78d11e6/attachment-0001.obj 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Aggr-NAT-T-2.6.22.log
Type: application/octet-stream
Size: 4435 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20090916/a78d11e6/attachment-0002.obj