CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2017/04/13 01:04:09
Modified files:
sbin/iked : config.c iked.h ikev2.c ikev2_pld.c
Log message:
Add a NAT-T keepalive timer in case we are behind a NAT gateway.
See RFC 5996, section 2.23, NAT Traversal:
In the case of a mismatching NAT_DETECTION_DESTINATION_IP hash, it
means that the system receiving the NAT_DETECTION_DESTINATION_IP
payload is behind a NAT and that system SHOULD start sending
keepalive packets as defined in [UDPENCAPS].
With markus@, ok reyk@
