[strongSwan] leftikeport doesn not initiate messages from ports other than 500/4500

Martin Willi martin at strongswan.org
Mon Sep 16 09:35:26 CEST 2013


Hi,

> I am trying to use leftikeport to initiate IKE messages from ports
> other than 500 or 4500 to simulate a NAT box.
> 
> I found out in the users mailing list that socket-dynamic plugin is
> required to get it working. Can someone tell me how to include this
> plugin and get it working?

Pass --disable-socket-default --enable-socket-dynamic to ./configure and
rebuild strongSwan. If that succeeds, you should see the socket-dynamic
plugin in the startup log and "ipsec statusall".

Regards
Martin





More information about the Users mailing list