<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_1_1497333842805_29024"><span></span></div><div dir="ltr" id="yui_3_16_0_1_1497333842805_29025"><span>Thank you </span><span style="font-family: "Courier New"; white-space: pre-wrap;" id="yui_3_16_0_1_1497333842805_28993">Tobias for your prompt response.</span></div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font size="2" face="Arial"> On Tuesday, June 13, 2017 1:14 PM, Tobias Brunner <tobias@strongswan.org> wrote:<br></font></div> <br><br> <div class="y_msg_container"><div dir="ltr">Hi Chinmaya,<br clear="none"><br clear="none">> I am using the strongSwan VPN client app (as an IKEv2 initiator) in my<br clear="none">> android device. How can I disable NAT feature? Because by default, it<br clear="none">> sends IKE_AUTH request and data traffic in UDP encapsulated packet which<br clear="none">> I do not want.<br clear="none"><br clear="none">You can't. The app uses the VpnService API and has limited privileges<br clear="none">so it can't send ESP packets directly (as that would require a RAW<br clear="none">socket, which is only possible in root/CAP_NET_RAW processes). That's<br clear="none">why UDP encapsulation is enforced and can't be disabled.<div class="yqt1070261865" id="yqtfd67245"><br clear="none"><br clear="none">Regards,</div><br clear="none">Tobias<div class="yqt1070261865" id="yqtfd83138"><br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>