On Fri, Nov 04, 2005 at 10:12:35PM +0100, Hans-Joerg Hoexer wrote: > > sorry, I was unclear. Rebuild isakmpd after updating src/sbin/isakmpd > from CVS using the 3.7 patch branch (ie. cvs up -P -rOPENBSD_3_7).
hm, i think i better update the other peer to 3.8, as well - although it's 550 km from here ... > Other workaround, disable nat-t with the -T option. but that only works for 3.8 isakmpd, doesn't it? what about the net.inet.esp.udpencap sysctl setting? should it be set to zero? -- tobias
