hello, I applied the following patch :
http://packetmischief.ca/files/openbsd/patches/isakmpd-nat-t-encap-mode.diff found in this post : http://comments.gmane.org/gmane.os.openbsd.misc/213771 Thanks four your help. 2015-04-09 22:39 GMT+02:00 Stuart Henderson <[email protected]>: > On 2015-04-08, David Dahlberg <[email protected]> wrote: >> What I finally did was simply to enable DPD by default in isakmpd.conf >> (you want to have it always on anyways). > > Note that you can have an isakmpd.conf with only needed settings, and > continue to configure sessions with ipsecctl/ipsec.conf. > -- Jean-Yves Boisiaud - Alcor Consulting 24, rue de la Glycine 49250 Saint Remy la Varenne mobile : +33 6 63 71 73 46 fixe : +33 9 72 41 19 35

