[Openswan Users] multiple user behind same nat

[Paul Wouters]

On Fri, 19 Aug 2011, Osvaldo Alvarez Pozo wrote:

> Hi all
> I have openswan +xl2tp for allowing i2TP/ipsec clients connetions.
> This works but when one user behind NAT get connected the seconf can
> not connect. for instance in windows 7 we get error 789.
>
> have anione got this working?

You need to use KLIPS with SAref. Then use

 	protostack=mast

and in your conn:

 	overlapip=yes

and in xl2tpd.conf:

 	ipsec saref = yes


Paul