Hi Ben, > I assume I'm still missing some vital config option. Any idea what > that might be?
Try adding leftsubnet=0.0.0.0/0 and rightsubnet=0.0.0.0/0. If that doesn't work increasing the loglevel for the cfg log group to 2 (see [1]), which will give you more details about the failure at that point. > This continues until the OS X client (NAT'd behind 209.204.75.80) > gives up. No idea which version of Mac OS X you're using but with newer releases you might want to try bare IPsec (called Cisco IPsec by Apple) instead of L2TP/IPsec. See [2] for more infos. Regards, Tobias [1] http://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration [2] http://wiki.strongswan.org/projects/strongswan/wiki/IOS_(Apple) _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users