Re: [strongSwan] ESP-encap port different than 4500

2021-01-08 Thread Noel Kuntze
Hi, Set remote and local IKE ports to something else than 500 and NON-ESP markers are set automatically, so NAT-T is then on by default, so to say. Just start off with port 4510. No need to float up. :) Kind regards Noel Am 08.01.21 um 15:09 schrieb Michael Schwartzkopff: Hi, I have two d

[strongSwan] ESP-encap port different than 4500

2021-01-08 Thread Michael Schwartzkopff
Hi, I have two different VPN servers behind ONE NAT address. Yes, I know it is nonsense, but it is the situation given here. One runs with 500/4500. Everything is find. I configured the firewall to forward packets on these port to the first VPN server. I want to use port 510 and 4510 for the