(racoon 876) Re: Racoon NAT-T Progress?

YAMASHITA Yutaka <[email protected]> Tue, 28 Dec 2004 19:15:41 +0900
Newsgroups gmane.network.ipv6.kame.racoon
Message-ID <[email protected]>
hi,

the original kame racoon doesn't support
NAT-T. you use IPsec-Tools (http://ipsec-tools.sourceforge.net)
which supports NAT-T ,don't you? if so,
ask ipsec-tools' developers about NAT-T.
(http://sourceforge.net/mail/?group_id=74601)

i have no idea about the RHEL3 kernel, but
ipsec-tools don't support NAT-T transport mode , i think.

tempdh> We're currently using Racoon backported in kernel 2.4.21-27.0.1 (RedHat
tempdh> Enterprise Linux 3) and have had no luck establishing an IPSec connection
tempdh> via a NAT gateway, i.e.:
tempdh> 
tempdh> PC (VPN Client) ---- ADSL Router ------------ Internet --------- RHEL3
tempdh> Server (Kame/Racoon)
tempdh> 
tempdh> 
tempdh> Is the NAT-T code by any chance still 'unstable' and thus not included in
tempdh> the stock RHEL3 kernel? Is there anything else I can try to get this to
tempdh> work?
tempdh> 
tempdh> PS: I am using esp transport...
tempdh> 
tempdh> 
tempdh> Syrex Intranets - Customised Solutions
tempdh> 
tempdh> 	David Herselman	 
tempdh> 	 	
tempdh> 	cell	 +27 (0)82 784 7222	 
tempdh> 	tel	 +27 (0)86 11 syrex (79739)	 
tempdh> 	fax	 +27 (0)86 12 syrex (79739)	 
tempdh> 	27 7th avenue parktown north 2193	 
tempdh> 	email [email protected]	 
tempdh> 	www.syrex.co.za