Provide options to enforce NAT-T UDP encapsulation. Options are
encapsulation=true for libreswan and forceencaps=true for strongswan.
This may be required in environments where firewalls drop ESP
traffic but where NAT-T detection fails because packets are not
subject to NAT.
Signed-off-by: Andreas
On Mon, Jun 6, 2022 at 12:54 PM Andreas Karis wrote:
>
> Provide options to enforce NAT-T UDP encapsulation. Options are
> encapsulation=true for libreswan and forceencaps=true for strongswan.
> This may be required in environments where firewalls drop ESP
> traffic but where NAT-T detection fails
