(racoon 880) Re: Racoon NAT-T Progress?

On Wed, Dec 29, 2004 at 07:29:42AM -0500, Wolfgang Hennerbichler wrote:
> On Tue, 2004-12-28 at 04:54, Ralf Spenneberg wrote:
> 
> > AFAIK NAT-T is only supported for tunnel mode in the Linux kernel 2.6.
> 
> That's wrong. Racoon doesn't support it. I have everything set up and
> running with Openswan and standard Linux 2.6.9. 

According to the source code, and according to some tests on
Free/NetBSD, ipsec-tool's version of racoon *does* support NAT-T in
tunnel mode.

And afaik, Linux 2.6 kernel also does support NAT-T, so if it doesn't
work, there must be a bug somewhere, in the source code or in your
configuration.


> > Therefore transport mode is probably not supported in the rhel stock
> > kernel either.
> 
> I like racoon, but in this case only openswan might do the trick. 


Does OpenSwan support NAT-T in transport mode ???


Yvan.