isakmpd und nat-t

[ramtha]

hallo zusammen,

ich habe ein obsd 3.5 und isakmpd -current laufen. isakmpd soll mit nat-t laufen.

nun habe ich mit 2 vpn clients (ssh sentinel & the green bow) folgenden bug festgestellt:

When you use it, the 4 fist message use port 500 and after message is on
another port (4500).
but when i test with your configuration we send the message nbr 5 (send
phase 1 main mode hash id notify)on port 4500 but we received a response on
port 500. So our client didn't accept this message because the response must
be on port 4500.

To resume :
to works fine :
SEND phase 1 Main Mode [SA] [VID] [VID] [VID] -> port 500
RECV phase 1 Main Mode [SA] [VID] [VID] [VID] [VID] -> port 500
SEND phase 1 Main Mode [KEY_EXCH] [NONCE] [NAT_D] [NAT_D] -> port 500
RECV phase 1 Main Mode [KEY_EXCH] [NONCE] [NAT_D] [NAT_D] -> port 500
SEND phase 1 Main Mode [HASH] [ID] [NOTIFY] -> port 4500
RECV phase 1 Main Mode [HASH] [ID] [NOTIFY] -> port 4500

but with your gateway the last message (recv phase1 main mode [HASH]...) is
on port 500.

hat jemand shcon erfolgreich nat-t am laufen und kann mir einen tipp geben welchen client er hat und welches draft dieser client unterstützt?

danke,

thomas