kernel-utun: specify NATT port when installing an SA with UDP encapsulation

diff --git a/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c b/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c
index bf507789bcfaa47ce7d80c0934cdb05bbc3e9784..c82c3847b7021b66e0c6a86774ef6ea67390ca58 100644 (file)
--- a/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c
+++ b/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c
@@ -290,6 +290,7 @@ static status_t add_sa_tun(private_kernel_utun_ipsec_t *this, tun_device_t *tun,
 
        if (encap)
        {
+               keys.args.u.ipsec_v1.natt_port = dst->get_port(dst);
                keys.args.u.ipsec_v1.natd = IF_UTUN_CRYPTO_IPSEC_NATD_MINE;
                keys.args.u.ipsec_v1.keepalive = IF_UTUN_CRYPTO_IPSEC_KEEPALIVE_NATT;
        }