edit : it does need the 4 zeros at the beginning to tell it's not an esp packet
sorry, tsaitgaist On 23.02.2011 23:06, tsaitgaist wrote: > Hi, > > I try to configure an IPsec client using strongswan. > I don't know the IPsec server, but I know the connection details. > But the server only listens to port 4500 > Normally strongswan sends the ike_sa_init on port 500 and then switches > to port 4500. > Is it possible to make strongswan send message 1 ike_sa_init on port > 4500 instead of 500 ? > I couldn't make it work using /rightprotoport, /nat_traversal, mobike or > keyexchange > It does not even need to add the additional zeros as described in > http://tools.ietf.org/html/draft-eronen-ipsec-ikev2-clarifications-02#section-6.7 > > thanks, > tsaitgaist > > > > _______________________________________________ > Users mailing list > [email protected] > https://lists.strongswan.org/mailman/listinfo/users _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
