<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Tobias,</p>
<p>thank you for the explanation. I was not sure what the issue was,
but I figured that the port 4500 was incorrect. NAT-Traversal was
already disabled on the Lancom, however, with also disabling
MOBIKE now I only see port 500 and by your explanation I
understand now a little better what the issue was.</p>
<p>Best regards,<br>
Valeri<br>
</p>
<div class="moz-cite-prefix">Am 25.11.19 um 13:31 schrieb Tobias
Brunner:<br>
</div>
<blockquote type="cite"
cite="mid:6d8b1ea0-ed53-e4ee-c491-c73a39a68093@strongswan.org">
<pre class="moz-quote-pre" wrap="">Hi Valeri,
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Here is tcpdump from what I think is the ping and its response (pinging
10.166.47.12 which is assigned to Lancom on ethernet port 1):
22:03:20.304824 IP (tos 0x0, ttl 64, id 1894, offset 0, flags [DF],
proto ESP (50), length 140)
A.A.A.A > B.B.B.B: ESP(spi=0xbf3e0bb5,seq=0x224), length 120
22:03:20.320540 IP (tos 0x0, ttl 57, id 34530, offset 0, flags [none],
proto UDP (17), length 148)
B.B.B.B.ipsec-nat-t > A.A.A.A.ipsec-nat-t: [no cksum] UDP-encap:
ESP(spi=0xc9012da8,seq=0x223), length 120
I am just clueless now and any help is appreciated. Let me know if any
further information is required.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
As you can see, the other peer somehow decides to use UDP-encapsulation
for ESP, even though there apparently is no NAT between the two. Since
the Linux kernel can't process UDP-encapsulated packets for SAs that
aren't configured for it (a known limitation) the inbound packets will
be dropped. I guess by disabling MOBIKE you prevent the other
implementation from enabling UDP-ecapsulation.
Regards,
Tobias
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<meta name="generator" content="LibreOffice 5.0.2.2 (Linux)">
<meta name="author" content="Valeri Geiser">
<meta name="created" content="2014-10-01T00:00:00">
<meta name="changed" content="2016-01-26T08:42:12.054050047">
<meta name="changedby" content="Valeri Geiser">
<meta name="changedby" content="Valeri Geiser">
<meta name="changedby" content="Valeri Geiser">
<meta name="changedby" content="Valeri Geiser">
<style type="text/css">
@page { margin: 2cm }
p { margin-bottom: 0.25cm; color: #000000; line-height: 120% }
a:link { so-language: en-US }
</style>
<p><font color="#1f497d"><font face="Arial, sans-serif">Bei Fragen
oder Unklarheiten stehen wir Ihnen gerne zur Verfügung.</font></font></p>
<p><font color="#1f497d"><font face="Arial, sans-serif">MFG,
Valeri
Geiser</font></font></p>
<p><font color="#1f497d"><font face="Arial, sans-serif"><b>KM
Logistik - Service GmbH <br>
Hauptstraße 2<br>
<span lang="en-US">66459
Kirkel-Limbach</span></b></font></font></p>
<p><font color="#1f497d"><font face="Arial, sans-serif"><span
lang="en-US"><b><br>
Phone:
</b></span></font></font><font color="#1f497d"><font
face="Arial, sans-serif"><span lang="en-US">(+49)
</span></font></font><font color="#1f497d"><font
face="Arial, sans-serif"><span lang="en-US">6841</span></font></font><font
color="#1f497d"><font face="Arial, sans-serif"><span
lang="en-US">
</span></font></font><font color="#1f497d"><font
face="Arial, sans-serif"><span lang="en-US">7567899</span></font></font><font
color="#1f497d"><font face="Arial, sans-serif"><span
lang="en-US"><br>
</span></font></font><font color="#1f497d"><font
face="Arial, sans-serif"><span lang="en-US"><b>Fax:
</b></span></font></font><font color="#1f497d"><font
face="Arial, sans-serif"><span lang="en-US">(+49)
6841 9933441</span></font></font></p>
<p><font color="#1f497d"><font face="Arial, sans-serif"><span
lang="en-US"><b>Email:</b></span></font></font><font
color="#1f497d">
</font><font color="#1f497d"><font face="Arial, sans-serif"><span
lang="en-US"><a
href="mailto:valeri.geiser@km-logistik-service.de">valeri.geiser@km-logistik-service.de</a><br>
</span></font></font><font color="#1f497d"><font
face="Arial, sans-serif"><b>Web:</b></font></font><font
color="#1f497d">
</font><a href="http://km-logistik-service.de/"><font
color="#1f497d"><font face="Arial, sans-serif">http://km-logistik-service.de</font></font></a></p>
<p><font color="#1f497d"><font face="Arial, sans-serif"><font
style="font-size: 10pt" size="2">KM
Logistik - Service Gesellschaft mit beschränkter Haftung<br>
Sitz
der Gesellschaft: 66459 Kirkel | Geschäftsführer: Klaus
Miosga |
Registergericht: Homburg HRB 17405 </font></font></font>
</p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
</div>
</body>
</html>