Re: isakmpd nat-t patch

2014-02-02 Thread Joel Knight
It does not. 0.010267 openbsd.4500 asa.4500: [bad udp cksum 6d4c!] udpencap: isakmp v1.0 exchange QUICK_MODE cookie: 1dc820688b0e577c-9abdf94cdd39ebb0 msgid: 0b77fb8d len: 292 payload: HASH len: 24 payload: SA len: 56 DOI: 1(IPSEC) situation: IDENTITY_ONLY

isakmpd nat-t patch

2014-02-01 Thread Joel Knight
Hi. I found an old post of sthen's to tech@ about NAT-T interop between isakmpd(8) and Cisco ASA. In summary, when isakmpd negotiates NAT-T with ASA, it doesn't send the proper encapsulation mode (as per RFC 3947). Original post is here:

Re: isakmpd nat-t patch

2014-02-01 Thread Stuart Henderson
isakmpd already sends the values from the RFC doesn't it? On 2 February 2014 00:23:19 GMT+00:00, Joel Knight knight.j...@gmail.com wrote: Hi. I found an old post of sthen's to tech@ about NAT-T interop between isakmpd(8) and Cisco ASA. In summary, when isakmpd negotiates NAT-T with ASA, it