(racoon 876) Re: Racoon NAT-T Progress?
YAMASHITA Yutaka <[email protected]> Tue, 28 Dec 2004 19:15:41 +0900
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
hi, the original kame racoon doesn't support NAT-T. you use IPsec-Tools (http://ipsec-tools.sourceforge.net) which supports NAT-T ,don't you? if so, ask ipsec-tools' developers about NAT-T. (http://sourceforge.net/mail/?group_id=74601) i have no idea about the RHEL3 kernel, but ipsec-tools don't support NAT-T transport mode , i think. tempdh> We're currently using Racoon backported in kernel 2.4.21-27.0.1 (RedHat tempdh> Enterprise Linux 3) and have had no luck establishing an IPSec connection tempdh> via a NAT gateway, i.e.: tempdh> tempdh> PC (VPN Client) ---- ADSL Router ------------ Internet --------- RHEL3 tempdh> Server (Kame/Racoon) tempdh> tempdh> tempdh> Is the NAT-T code by any chance still 'unstable' and thus not included in tempdh> the stock RHEL3 kernel? Is there anything else I can try to get this to tempdh> work? tempdh> tempdh> PS: I am using esp transport... tempdh> tempdh> tempdh> Syrex Intranets - Customised Solutions tempdh> tempdh> David Herselman tempdh> tempdh> cell +27 (0)82 784 7222 tempdh> tel +27 (0)86 11 syrex (79739) tempdh> fax +27 (0)86 12 syrex (79739) tempdh> 27 7th avenue parktown north 2193 tempdh> email [email protected] tempdh> www.syrex.co.za