I have now managed to get the whole thing working with x509 keys...

This all works if I use two public IP addresses.

If my client however, is behind a NATing gateway, the whole thing falls over.

I am running XP sp 2 and have enabled AssumeUDPEncapsulationContextOnSendRule.

I have also added the following lines to my racoon.conf...

isakmp_natt a.b.c.d [4500];

and

nat_traversal force;

but this still doesn't seem to want ot force natt - doing tcpdumps, I do not see windows try and connect to port 4500 udp - what am I doing wrong?

Thanks

Andrew


Have you taken a look at http://www.ipsec-howto.org/ ? It's a pretty
good (IMHO) and hands-on HOWTO that contains example configuration files
for isakmpd and racoon.





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Reply via email to