You forgot: nat_traversal=yes ?Might be an option, but I used to set it off by default because it broke stuff in earlier freeswan releases (where I applied the NAT-T patch). Is it "safe" now, i.e. is _everything_ expected to work with NAT-T being on that work when it is disabled ?
Perhaps Rene wants to enable this per default.
best regards, Rene
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]