[Openswan Users] macs/xp

[Christian Huldt]

Matthew Bowman skrev 2010-05-21 17.39:
> Does anyone know that status of the bug which is still mentioned in
> this article ..
>
> http://www.jacco2.dds.nl/networking/openswan-macosx.html
>
> about macs needing the foceencaps=yes setting and a registry mod for
> windows xp for both to be able to connect?

I don't know the exakt status of the bug, but I have a working
configuration with a fairly recent version of openswan that works with
(NATed) macs and windows clients, but not (at least not last time we
tested) if the clients are not behind NAT.

Basically:

        authby=secret
        leftprotoport=17/1701
        rightprotoport=17/%any
        forceencaps = no
        pfs=no
        left=%defaultroute
        right=%any
        rightsubnet=vhost:%no,%priv


-- 
mvh
Christian Huldt
0704612207