[strongSwan] issue connecting to fortigate
tobias at strongswan.org
Fri Jun 26 10:01:02 CEST 2020
> The logs on the strongsan show
> something I'm not used to seeing. It appears somehow that quickmode
> phase2 is responding on port 500 instead of 4500.
That's normal if there is no NAT between the hosts or the peer has NAT
detection/traversal disabled (strongSwan always has it enabled). The
switch to 4500 only happens if the initiator detects a NAT. If there
actually is a NAT between the hosts, make sure to enable NAT-T on the peer.
More information about the Users