On Fri, Jan 31, 2003 at 08:43:06AM -0500, Todd Chandler wrote:
> When I attempt to connect from the client, it simply times out.  Any
> ideas what I'm missing?

i assume the client is behind nat.

if you're using 3.2, try this rule:

nat on $ext_if inet proto udp from any port = isakmp to any -> \
        $ext_if port 500

problem is that the server is probably ignoring isakmp traffic that
doesn't have a source port of 500.

- jolan

Reply via email to