After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 611027 - [enh] allow --force-natt option in NAT menu
[enh] allow --force-natt option in NAT menu
Status: RESOLVED FIXED
Product: NetworkManager
Classification: Platform
Component: VPN: vpnc
unspecified
Other Linux
: Normal enhancement
: ---
Assigned To: Dan Williams
Dan Williams
Depends on:
Blocks:
 
 
Reported: 2010-02-25 00:16 UTC by Dan Williams
Modified: 2010-02-26 10:23 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
force-natt patch (5.19 KB, patch)
2010-02-25 07:54 UTC, Huzaifa Sidhpurwala (Red Hat Security Response) 		none Details | Review

Description Dan Williams 2010-02-25 00:16:16 UTC 
"I have a situation where vpnc is failing due to an incorrect setting in
the NetworkManager vpnc plugin.  The situation is a condition where a
firewall or other non-NAT device is interfering with protocol 50 (esp)
and we need NAT-T even though we are not behind a NAT.  As it so
happens, vpnc does support this.  It's "NAT Traversal mode force-natt"."
Comment 1 Dan Williams 2010-02-25 00:19:33 UTC 
Basically we need to:

1) Change the existing properties dialog "NAT Traversal" menu's "NAT-T" option to "NAT-T (autodetect)"
2) Add a "NAT-T (always)" option to that dropdown
3) Push that option through from the dialog to nm-vpnc-service.c
Comment 2 Huzaifa Sidhpurwala (Red Hat Security Response) 2010-02-25 03:48:53 UTC 
If any one is not doing it,  i will do it and post a patch soon :)
Comment 3 Huzaifa Sidhpurwala (Red Hat Security Response) 2010-02-25 07:54:49 UTC 
Created attachment 154663 [details] [review]
force-natt patch
Comment 4 Huzaifa Sidhpurwala (Red Hat Security Response) 2010-02-25 07:55:52 UTC 
Attached patch.
Note for importing and exporting to pcf, i had to create a key 
X-NM-Use-Force-NAT-T, which when set along with X-NM-Use-NAT-T, will enable the force-natt, hope that is ok.

Thanks.
Comment 5 Dan Williams 2010-02-25 21:45:22 UTC 
041c8ddd8ea479a163e9d4d265e2a536c057aa50 (master)
761c1117d3809e9a7794e75289319e6f91c2e60a (0.7.x)


thanks!
Comment 6 John Walicki 2010-02-26 10:23:26 UTC 
Huzaifa / Dan - Thanks!