[Ipsec-tools-devel] NAT-T troubles

[Marcus L. <ml...@no...>]

I've narrowed down my troubles somewhat.  It seems that the ipsec-tools
  IKE implementation does *something* that causes my DLINK DI-624 to
  "run home to momma"--or at least, to "lose state" on its PPPOE connection,
  which I have to manually re-start.  The very first IKE message sent from
  my system, towards the DI-624, and ultimately to the roadwarrior gateway
  cases the DI-624 to lose its marbles.

My Contivity client, behind the same DI-624, doesn't have this problem.
  Although, I do get random "loss of state" on the DI-624 PPPOE connection
  from time to time, this is the first clear correlation that the loss-of-state
  correlates to anything.

Anyone else with a DI-624 who is also using ipsec-tools?

-- 
Marcus Leech                            Mail:   Dept 1A12, M/S: 04352P16
Security Standards Advisor        Phone: (ESN) 393-9145  +1 613 763 9145
Advanced Technology Research
Nortel Networks                          ml...@no...