VPN - Re: IPSec using certificate authentication

Author

Re: IPSec using certificate authentication

dan

2005-05-11, 7:45 am

Phillip Remaker schrieb:
> Is the WinXP client behind a NAT device? Does the NAT device support

> IPSEC/ESP NAT?

The same problem persists even if they are directly connected to each
other. Another interesting point I forgot to mention might be that the
first 4 ISAKMP packets pass as expected, but then the client does not
initiate the final exchange (authentication) in main mode. A packet
trace looks like this:

ISAKMP 10.0.0.2 --> 2.2.2.2
ISAKMP 2.2.2.2 --> 10.0.0.2
ISAKMP 10.0.0.2 --> 2.2.2.2
ISAKMP 2.2.2.2 --> 10.0.0.2

ISAKMP 2.2.2.2 --> 10.0.0.2
ISAKMP 2.2.2.2 --> 10.0.0.2