[Swan-dev] NAT and intermediate exchange

Paul Wouters paul at nohats.ca
Thu Feb 22 20:36:37 EET 2024


On Thu, 22 Feb 2024, Andrew Cagney via Swan-commit wrote:

> New commits:
> commit 8f2151aab6084561bdeb8c49206ee238b508eecc
> Author: Andrew Cagney <cagney at gnu.org>
> Date:   Thu Feb 22 10:58:13 2024 -0500
>
>    ikev2: drop code checking for NAT during IKE_INTERMEDIATE exchange
>
>    NAT happens during IKE_SA_INIT; follow-up:
>     pluto: do not allow nic-offload=packet with encapsulation=yes

I checked RFC9242 and you are correct.

Thanks,

Paul


More information about the Swan-dev mailing list