(racoon 686) Re: racoon & ppc2003 Again

Francesco Defilippo wrote:

> Francesco Defilippo wrote:
>
>> ok solved! I have installed pppd with support for ms-chap-v2  :)
>
>
> Hi, all my test are from the same lan with a wifi cf card:
>
> 192.168.1.2     192.168.1.1
> ppc              -> vpngate
>
> when i try with a gprs card my vpngate log show only:
>
> 2004-09-01 20:09:21: INFO: IPsec-SA established: ESP/Transport 
> 194.185.97.55->81 .17.39.43 spi=114326902(0x6d07d76)
> 2004-09-01 20:09:21: INFO: IPsec-SA established: ESP/Transport 
> 81.17.39.43->194 .185.97.55 spi=10683248(0xa30370)
>
> after  a while:
>
> 2004-09-01 20:09:56: INFO: purged IPsec-SA proto_id=ESP spi=10683248.
> 2004-09-01 20:09:56: INFO: purged ISAKMP-SA proto_id=ISAKMP 
> spi=a1e7099e5b9299ac:186d984abbd78633.
> 2004-09-01 20:09:57: INFO: ISAKMP-SA deleted 
> 81.17.39.43[500]-194.185.97.55[44158] 
> spi:a1e7099e5b9299ac:186d984abbd78633
>
> no log from l2tpd.
>
The actual problem encountered in this setup is racoon denying to set up 
a ipsec connection using NAT-T when the initiator puts up the connection 
in _transport_ mode.

This has been disabled due to security reasons, as far as I learned. 
Howto force ?


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497