[Swan] Libreswan NAT-T Source port

Madden, Joe Joe.Madden at mottmac.com
Thu Apr 20 10:21:35 UTC 2017


Hi All,

I have an issue between a libreswan and a StrongSwan instance. 

When Stronswan initiates the connection it comes up OK. When we initiate it the IKE v1 is established, but phase 2 NAT-T becomes erouted but we have no traffic flow.

Looking at this, I've found that when we initiate the connection the source port of our packet is 1024 and not 4500 as I would expect.

Is this normal behaviour? 

Thanks

Joe


More information about the Swan mailing list