Subject: Re: 3.1_stable panics with ipnat and isakmp proxy
To: Louis Guillaume <lguillaume@berklee.edu>
From: Matthias Scheler <tron@zhadum.org.uk>
List: netbsd-users
Date: 01/23/2007 12:07:03
On Mon, Jan 22, 2007 at 06:25:56PM -0500, Louis Guillaume wrote:
> ipnat.conf file contains this:
> 
> map sip1 192.168.1.0/24 -> 0.0.0.0/32 proxy port isakmp ipsec/udp
> 
> ... without this line there is no connecting to the VPN in question.

Are you sure about that? Cisco VPN clients usually support NAT-T (RFC 3948)
which encapsulates all IPsec traffic in UDP. They don't need any
"VPN passthrough" support in the NAT router.

I would recomment to check the configuration of the Cisco VPN client
and enable UDP tunneling.

BTW: would you please nevertheless submit a bug report with "send-pr"
     because of the kernel panic?

	Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/