[strongSwan] ike_sa_init on port 4500

tsaitgaist ml at mail.tsaitgaist.info
Wed Feb 23 23:06:38 CET 2011


Hi,

I try to configure an IPsec client using strongswan.
I don't know the IPsec server, but I know the connection details.
But the server only listens to port 4500
Normally strongswan sends the ike_sa_init on port 500 and then switches
to port 4500.
Is it possible to make strongswan send message 1 ike_sa_init on port
4500 instead of 500 ?
I couldn't make it work using /rightprotoport, /nat_traversal, mobike or
keyexchange
It does not even need to add the additional zeros as described in
http://tools.ietf.org/html/draft-eronen-ipsec-ikev2-clarifications-02#section-6.7

thanks,
tsaitgaist
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20110223/f9fe2425/attachment.html>


More information about the Users mailing list