Re: isakmpd nat-t patch

2014-02-02 Thread Joel Knight
It does not. 0.010267 openbsd.4500 > asa.4500: [bad udp cksum 6d4c!] udpencap: isakmp v1.0 exchange QUICK_MODE cookie: 1dc820688b0e577c->9abdf94cdd39ebb0 msgid: 0b77fb8d len: 292 payload: HASH len: 24 payload: SA len: 56 DOI: 1(IPSEC) situation: IDENTITY_ONLY p

Re: isakmpd nat-t patch

2014-02-01 Thread Stuart Henderson
isakmpd already sends the values from the RFC doesn't it? On 2 February 2014 00:23:19 GMT+00:00, Joel Knight wrote: >Hi. > >I found an old post of sthen's to tech@ about NAT-T interop between >isakmpd(8) and Cisco ASA. In summary, when isakmpd negotiates NAT-T >with >ASA, it doesn't send the pro

isakmpd nat-t patch

2014-02-01 Thread Joel Knight
Hi. I found an old post of sthen's to tech@ about NAT-T interop between isakmpd(8) and Cisco ASA. In summary, when isakmpd negotiates NAT-T with ASA, it doesn't send the proper encapsulation mode (as per RFC 3947). Original post is here: http://openbsd.7691.n7.nabble.com/isakmpd-NAT-T-interoperabi