(racoon 709) Re:

On Wed, Sep 08, 2004 at 09:40:16AM +0200, Lockenvitz Jan EXT wrote:
> I need a handy Client which support IPSEC over NAT-T.

KAME racoon has no NAT-T support yet. ipsec-tools's racoon integrated
some of the work but it seems incomplete.

> So i tried to use it with Cisco VPN Client (4.6 and 4.0.5) but i always got the message: 
> ERROR: ignore information because the message has no hash payload.

racoon does not support hybrid auth, Xauth and ISAKMP mode config, which are
required to interoperate with the Cisco VPN client. I posted a patch that
implements part of that a few days ago.

> I saw a raconn TAR-Archive in this mailing list some days ago, in which the interoperability with Cisco VPN Client has been improved. But the "make" on this TAR-archive (configure is OK) does not work because some files are missing (gcc says). What else do i need to compile and install/test it for Debian?

make a cvs checkout of the kame repository, then overwrite the racoon 
directory by the tarball I posted a few days ago. You'll probably have to 
build and install libipsec before building racoon (don't forget to re-run
configure in the racoon directory)

-- 
Emmanuel Dreyfus
[email protected]