diff options
| author | tobhe <tobhe@cvs.openbsd.org> | 2019-11-18 14:01:45 +0000 |
|---|---|---|
| committer | tobhe <tobhe@cvs.openbsd.org> | 2019-11-18 14:01:45 +0000 |
| commit | 2268da53ca7a83d48eb19d723df4e7b11aade1d8 (patch) | |
| tree | 3d1fe240e0c41d937bc8dd6c9cec017c1ec68fd9 /sbin/iked/ikev2.c | |
| parent | 334c030c1c54d81bd237173272e14132d4dd12f8 (diff) | |
Enable ESP UDP-encapsulation with '-t' flag.
ok patrick@
Diffstat (limited to 'sbin/iked/ikev2.c')
| -rw-r--r-- | sbin/iked/ikev2.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sbin/iked/ikev2.c b/sbin/iked/ikev2.c index bd22bda0255..e4d37665368 100644 --- a/sbin/iked/ikev2.c +++ b/sbin/iked/ikev2.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ikev2.c,v 1.179 2019/11/15 14:14:14 tobhe Exp $ */ +/* $OpenBSD: ikev2.c,v 1.180 2019/11/18 14:01:44 tobhe Exp $ */ /* * Copyright (c) 2019 Tobias Heider <tobias.heider@stusta.de> @@ -1075,7 +1075,7 @@ ikev2_init_ike_sa_peer(struct iked *env, struct iked_policy *pol, if (ntohs(port) == IKED_NATT_PORT) { /* Enforce NAT-T on the initiator side */ log_debug("%s: enforcing NAT-T", __func__); - req.msg_natt = sa->sa_natt = 1; + req.msg_natt = sa->sa_natt = sa->sa_udpencap = 1; } if ((len = ikev2_add_nat_detection(env, buf, &pld, &req, len)) == -1) |