[strongSwan] Ipsec server and l2tp client are both behind NAT

[hayate]

Hi all,

Currently I'm using strongswan and my ipsec server and client are both
behind NAT, connected through internet.
The problem is: l2tp client through transport mode cannot establish
the connection.

I have enabled the nat transport option and set nat_traveral to yes.

So is this behavior intended? or maybe a potential bug?

ps: I also tried openswan, and it works well in such a situation.

best regards,
Vincent Li