Re: Vpnc pluggin needs "force-natt" option.

[Dan Williams <dcbw redhat com>]

On Thu, 2010-02-25 at 13:28 +0530, Huzaifa Sidhpurwala wrote:
> Hi All,
> 
> Created a patch and it works for me.
> 
> More details on the comment in the bug.

Committed and pushed to master and stable 0.7, thanks.

Dan


> 
> On Thu, Feb 25, 2010 at 5:47 AM, Dan Williams <dcbw redhat com> wrote:
>         On Wed, 2010-02-24 at 18:38 -0500, Michael H. Warfield wrote:
>         > Hello all!
>         >
>         > I have a situation where vpnc is failing due to an incorrect
>         setting in
>         > the NetworkManager vpnc plugin.  The situation is a
>         condition where a
>         > firewall or other non-NAT device is interfering with
>         protocol 50 (esp)
>         > and we need NAT-T even though we are not behind a NAT.  As
>         it so
>         > happens, vpnc does support this.  It's "NAT Traversal mode
>         force-natt".
>         > In those environments, cli invocation of vpnc works like a
>         charm.  But
>         > there appears to be no way for the NetworkManager vpnc
>         plugin to
>         > configure and use this.  The force-natt option is most
>         likely to work in
>         > the widest variety of environments at the cost of a slight
>         overhead (UDP
>         > encapsulation).  OpenSWAN, StrongSWAN, Racoon, and vpnc all
>         support
>         > this.  Just need the plugin adapted to support it as  well.
>          Any chance
>         > of getting that added to that plugin?
>         
>         
>         Seems pretty simple; to make sure it doesn't get lost I've
>         created:
>         
>         https://bugzilla.gnome.org/show_bug.cgi?id=611027
>         
>         Can't promise when, but it would be a good simple bug for a
>         new
>         contributor to pick up.
>         
>         Dan
>         
>         
>         _______________________________________________
>         NetworkManager-list mailing list
>         NetworkManager-list gnome org
>         http://mail.gnome.org/mailman/listinfo/networkmanager-list
>