Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-28 Thread Brady Johnson via Swan-dev
Correction: I requested to see if it is possible to see the Libreswan configuration nmstate generates or if nmstate directly communicates with Libreswan via Whack messages. I'll report back with more info about that. Regards, *Brady Johnson* Principal Software Engineer Telco Verification

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-28 Thread Brady Johnson via Swan-dev
Here is the nmstate pull request to fix the dhcp issue. https://github.com/nmstate/nmstate/pull/2556 I requested to see if it is possible to see the configuration Libreswan generates or if nmstate directly communicates with Libreswan via Whack messages. I'll report back with more info about that.

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-27 Thread Andrew Cagney via Swan-dev
On Tue, 27 Feb 2024 at 05:10, Brady Johnson wrote: > > We tried several changes to the client nmstate configuration. Setting "ipv4: > dhcp: false" caused a configuration error in nmstate. We have created a bug > for that and the nmstate team is working on it. I didn't see it here

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-27 Thread Brady Johnson via Swan-dev
Right, but for this use case we didnt want the server to assign an IP to the client. Thanks, *Brady Johnson* Principal Software Engineer Telco Verification Ecosystems Engineering brady.john...@redhat.com On Tue, Feb 27, 2024 at 4:40 PM Paul Wouters wrote: > On Tue, 27 Feb 2024, Brady

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-27 Thread Paul Wouters via Swan-dev
On Tue, 27 Feb 2024, Brady Johnson via Swan-dev wrote: We tried several changes to the client nmstate configuration. Setting "ipv4: dhcp: false" caused a configuration error in nmstate. We have created a bug for that and the nmstate team is working on it. Then, we tried with the same client

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-27 Thread Brady Johnson via Swan-dev
We tried several changes to the client nmstate configuration. Setting "ipv4: dhcp: false" caused a configuration error in nmstate. We have created a bug for that and the nmstate team is working on it. Then, we tried with the same client nmstate configuration, but added "leftmodecfgclient: false"

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-22 Thread Andrew Cagney via Swan-dev
On Fri, 16 Feb 2024 at 10:18, Tuomo Soini via Swan-dev wrote: > > On Fri, 16 Feb 2024 16:12:20 +0100 > Brady Johnson via Swan-dev wrote: > > > I included the configuration in the original email, and it did not > > include "narrowing", nor "leftmodecfgclient". I'll check if either of > > those

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-16 Thread Tuomo Soini via Swan-dev
On Fri, 16 Feb 2024 16:12:20 +0100 Brady Johnson via Swan-dev wrote: > I included the configuration in the original email, and it did not > include "narrowing", nor "leftmodecfgclient". I'll check if either of > those are set by default. My guess is that "dhcp" in NetworkManager configuration

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-16 Thread Brady Johnson via Swan-dev
ncipal Software Engineer Telco Verification Ecosystems Engineering brady.john...@redhat.com On Fri, Feb 16, 2024 at 4:07 PM Paul Wouters wrote: > On Fri, 16 Feb 2024, Brady Johnson via Swan-dev wrote: > > > Subject: Re: [Swan-dev] What does "missing v2CP reply" mean? >

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-16 Thread Paul Wouters via Swan-dev
On Fri, 16 Feb 2024, Brady Johnson via Swan-dev wrote: Subject: Re: [Swan-dev] What does "missing v2CP reply" mean? Would it be more helpful to enable debug logging? Or is there some other test that could be done to figure this out? It seems your peer has not been configured to h

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-16 Thread Brady Johnson via Swan-dev
Would it be more helpful to enable debug logging? Or is there some other test that could be done to figure this out? Regards, *Brady Johnson* Principal Software Engineer Telco Verification Ecosystems Engineering brady.john...@redhat.com On Fri, Feb 16, 2024 at 1:45 AM Andrew Cagney wrote: >

Re: [Swan-dev] What does "missing v2CP reply" mean?

2024-02-15 Thread Andrew Cagney via Swan-dev
> Feb 15 06:15:48 saledortvm2 pluto[70624]: "server01.cnf.com" #2: processing > decrypted IKE_AUTH request: SK{IDi,CERT,AUTH,CP,SA,TSi,TSr} notice how the client sent a CP payload in the request (CP_REQUEST to be exact). but > #2: missing v2CP reply, not attempting to setup child SA > #1: IKE

[Swan-dev] What does "missing v2CP reply" mean?

2024-02-15 Thread Brady Johnson via Swan-dev
Hello, We are trying to create a host-to-subnet tunnel and are getting an error message that we do not understand. The high-level overview is as follows: - The server is the subnet side of the host-to-subnet - The server subnet is 172.16.110.0/24 - The server IP is 10.1.98.208 - The client is