From: Martin Willi <martin@revosec.ch>
Date: Mon, 15 Apr 2013 13:36:53 +0000 (+0200)
Subject: kernel-utun: specify NATT port when installing an SA with UDP encapsulation
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a161c9ecf91d3bff517b7f68b1adf78c30b355da;p=thirdparty%2Fstrongswan.git

kernel-utun: specify NATT port when installing an SA with UDP encapsulation
---

diff --git a/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c b/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c
index bf507789bc..c82c3847b7 100644
--- a/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c
+++ b/src/libhydra/plugins/kernel_utun/kernel_utun_ipsec.c
@@ -290,6 +290,7 @@ static status_t add_sa_tun(private_kernel_utun_ipsec_t *this, tun_device_t *tun,
 
 	if (encap)
 	{
+		keys.args.u.ipsec_v1.natt_port = dst->get_port(dst);
 		keys.args.u.ipsec_v1.natd = IF_UTUN_CRYPTO_IPSEC_NATD_MINE;
 		keys.args.u.ipsec_v1.keepalive = IF_UTUN_CRYPTO_IPSEC_KEEPALIVE_NATT;
 	}