[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] Non-standard IKE ports
From:       eyas barhouk <eyas37 () hotmail ! com>
Date:       2018-11-05 14:09:01
Message-ID: SG2PR03MB1517303C7CDA90CDEB1FD841C5CA0 () SG2PR03MB1517 ! apcprd03 ! prod ! outlook ! com
[Download RAW message or body]

Thanks for your kind feedback Tobias

I mean by saying the client doesn't understand the port_nat=0 that the client fails \
to connect to the vpn server . And I think it's like what u say" a client issue ".

Many thanks
Regards

Get Outlook for Android<https://aka.ms/ghei36>

________________________________
From: Tobias Brunner <tobias@strongswan.org>
Sent: Monday, November 5, 2018 3:51:48 PM
To: eyas barhouk; users@lists.strongswan.org
Subject: Re: [strongSwan] Non-standard IKE ports

Hi,

> so is there a way to make both of client and server use random ports

Using random ports on the server does not really work because the client
has to know the port.

> (i
> tried to set port_nat_t = 0 but the client doesn't understand it).

What do you mean "doesn't understand it"?

See [1] regarding custom ports in general.

Regards,
Tobias

[1]
https://wiki.strongswan.org/projects/strongswan/wiki/NATTraversal#Custom-Server-Ports


[Attachment #3 (text/html)]

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: \
4pt; border-left: #800000 2px solid; } --></style> </head>
<body>
<div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; \
font-size:11pt; color:black"> Thanks for your kind feedback Tobias<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; \
font-size:11pt; color:black"> I mean by saying the client doesn't understand the \
port_nat=0 that the client fails to connect to the vpn server .<br> </div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; \
font-size:11pt; color:black"> And I think it's like what u say&quot; a client issue \
&quot;.<br> <br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; \
font-size:11pt; color:black"> Many thanks<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; \
font-size:11pt; color:black"> Regards<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; \
font-size:11pt; color:black"> <div dir="auto" style="direction:ltr; margin:0; \
padding:0; font-family:sans-serif; font-size:11pt; color:black"> Get <a \
href="https://aka.ms/ghei36">Outlook for Android</a></div> <br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" \
style="font-size:11pt"><b>From:</b> Tobias Brunner &lt;tobias@strongswan.org&gt;<br> \
<b>Sent:</b> Monday, November 5, 2018 3:51:48 PM<br> <b>To:</b> eyas barhouk; \
users@lists.strongswan.org<br> <b>Subject:</b> Re: [strongSwan] Non-standard IKE \
ports</font> <div>&nbsp;</div>
</div>
</div>
<font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hi,<br>
<br>
&gt; so is there a way to make both of client and server use random ports<br>
<br>
Using random ports on the server does not really work because the client<br>
has to know the port.<br>
<br>
&gt; (i<br>
&gt; tried to set port_nat_t = 0 but the client doesn't understand it).&nbsp;<br>
<br>
What do you mean &quot;doesn't understand it&quot;?<br>
<br>
See [1] regarding custom ports in general.<br>
<br>
Regards,<br>
Tobias<br>
<br>
[1]<br>
<a href="https://wiki.strongswan.org/projects/strongswan/wiki/NATTraversal#Custom-Serv \
er-Ports">https://wiki.strongswan.org/projects/strongswan/wiki/NATTraversal#Custom-Server-Ports</a><br>
 </div>
</span></font>
</body>
</html>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic