<div dir="ltr">That didn't seem to have any effect with either value.<div><br></div><div>The OS X Server is version 10.10 (Yosemite) in case that helps.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Jan 11, 2015 at 8:38 AM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Sun, 11 Jan 2015, Ali Gangji wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have not been able to get a successful connection to OS X Server.<br>
<br>
The issue looks like what is described here:<br>
<a href="https://lists.openswan.org/pipermail/users/2013-November/022794.html" target="_blank">https://lists.openswan.org/<u></u>pipermail/users/2013-November/<u></u>022794.html</a><br>
<br>
The best I can get is one of the following error messages:<br>
<br>
length of ISAKMP Notification Payload is smaller than minimum<br>
</blockquote>
<br>
</span><span class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Linux Libreswan 3.12 (netkey) on 3.17.6-1-ARCH<br>
</blockquote>
<br>
</span><span class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Any help would be greatly appreciated. Thanks!<br>
</blockquote>
<br></span>
Can you try adding nat-ikev1-method=drafts or nat-ikev1-method=rfc ?<br>
<br>
This disables some of the NAT-T detection payloads to work around buggy<br>
implementations. I thought this was limited to Cisco, but perhaps OSX<br>
Server also a bug?<br>
<br>
Paul<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
</blockquote>
</blockquote></div><br></div>