[strongSwan] ike_sa_init on port 4500

tsaitgaist ml at mail.tsaitgaist.info
Wed Feb 23 23:15:37 CET 2011


edit : it does need the 4 zeros at the beginning to tell it's not an esp
packet

sorry,
tsaitgaist

On 23.02.2011 23:06, tsaitgaist wrote:
> Hi,
> 
> I try to configure an IPsec client using strongswan.
> I don't know the IPsec server, but I know the connection details.
> But the server only listens to port 4500
> Normally strongswan sends the ike_sa_init on port 500 and then switches
> to port 4500.
> Is it possible to make strongswan send message 1 ike_sa_init on port
> 4500 instead of 500 ?
> I couldn't make it work using /rightprotoport, /nat_traversal, mobike or
> keyexchange
> It does not even need to add the additional zeros as described in
> http://tools.ietf.org/html/draft-eronen-ipsec-ikev2-clarifications-02#section-6.7
> 
> thanks,
> tsaitgaist
> 
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users




More information about the Users mailing list