[Swan-dev] [Swan] Multiple clients behind the same NAT IP get dropped - IPSec / xauth

[Schmidt, Michael M]

Hey Paul,

Sorry I never got back to you. Unfortunately the VMs I had been testing on were wiped out, so I'm not sure I can be that great of a help anymore.

Regards,
Matt

________________________________
From: Paul Wouters <paul at nohats.ca>
Sent: Tuesday, August 23, 2016 12:22:56 PM
To: Schmidt, Michael M
Cc: Libreswan Development List
Subject: Re: [Swan] Multiple clients behind the same NAT IP get dropped - IPSec / xauth

On Tue, 28 Jun 2016, Schmidt, Michael M wrote:

> I can run a debug if you tell me what debug level to run on and what version you want me to test with.

Antony located a bug that I think might have caused this problem.
Try this small patch:

diff --git a/programs/pluto/connections.c b/programs/pluto/connections.c
index 7a5b1a2..bcb73a7 100644
--- a/programs/pluto/connections.c
+++ b/programs/pluto/connections.c
@@ -1819,6 +1821,9 @@ char *add_group_instance(struct connection *group, const i p_subnet *target)

                 t->spd.reqid = group->spd.reqid == 0 ?
                         gen_reqid() : group->spd.reqid;
+               t->spd.reqid =  gen_reqid();
+
+

                 /* add to connections list */
                 t->ac_next = connections;

Paul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20160823/1ff695ad/attachment.html>