[strongSwan] IKEv2: Mobike=no not working

[Noel Kuntze]

If you care, you can just use a DNAT rule in *nat OUTPUT (if you use Linux) to redirect the packets to port 4500 to port 500.
> Thanks for your quick response Noel. I am testing a scenario where we don't have 4500 port open on intermediate NAT device. I think my options are:
> 1. Libreswan : which provides configurable parameter - nat-ikeport(default 4500)
> 2. Use IPsec client which has nat_traversal parameter
>   a. Older version of strongswan
>   b. Openswan.
>
> I am wondering if the new age Android and Iphone do the automatic port floating in case of NAT-T. I need to test th


-- 

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160225/06fa46ca/attachment.pgp>