[Swan-dev] pluto: follow up on 8d9c30bfd93e3e7d (pluto: Ensure PLUTO_PEER_CLIENT= has netmask included)

[Tuomo Soini]

On Thu, 28 Oct 2021 11:04:53 -0400
Andrew Cagney <andrew.cagney at gmail.com> wrote:

> This got me curious, why would PLUTO_PEER_CLIENT need to be set to the
> host and not client address.  Adding a pexpect turned this up:

That's transport mode thing. You need to send packets to nat ip, not
behind nat (real) ip.


-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>