CLOUDSTACK-7821: Fix OSX cannot connect to VPN due to wrongly declaim ENCAPSULATION_MODE_UDP_TRANSPORT_RFC
OSX always declaims it's behind NAT no matter it's true or not, thus result in confusion of openswan. Add parameter "forceencaps=yes" to openswan to make sure non NAT VPN connection from OSX can pass through. Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/e1c788ca Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/e1c788ca Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/e1c788ca Branch: refs/heads/master Commit: e1c788ca3c69a8c8c2041c7b106f76fa49332888 Parents: c30d4ed Author: Sheng Yang <sheng.y...@citrix.com> Authored: Thu Oct 30 17:23:34 2014 -0700 Committer: Sheng Yang <sheng.y...@citrix.com> Committed: Thu Oct 30 17:24:57 2014 -0700 ---------------------------------------------------------------------- systemvm/patches/debian/vpn/etc/ipsec.d/l2tp.conf | 1 + 1 file changed, 1 insertion(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/e1c788ca/systemvm/patches/debian/vpn/etc/ipsec.d/l2tp.conf ---------------------------------------------------------------------- diff --git a/systemvm/patches/debian/vpn/etc/ipsec.d/l2tp.conf b/systemvm/patches/debian/vpn/etc/ipsec.d/l2tp.conf index 7459e25..1cdd69d 100644 --- a/systemvm/patches/debian/vpn/etc/ipsec.d/l2tp.conf +++ b/systemvm/patches/debian/vpn/etc/ipsec.d/l2tp.conf @@ -30,4 +30,5 @@ conn L2TP-PSK # ---------------------------------------------------------- # Change 'ignore' to 'add' to enable this configuration. # + forceencaps=yes auto=add
