Re: [strongSwan] 答复: IP range support

2012-02-14 Thread Tobias Brunner
Hi Chester, If I want to add a parameter (like leftiprange,rightiprange) in ipsec.conf, and I hope the parameters can be accepted by strongswan, how can I implement it? I'm not sure what you mean by I hope the parameters can be accepted by strongSwan, but if you want to implement all of this

[strongSwan] strongSwan on a KVM VPS does not work

2012-02-14 Thread hayate
Hi all, I just set up strongSwan server on a KVM VPS, but the connections have problems. First, show my ipsec.conf config setup strictcrlpolicy=no charonstart=yes uniqueids=yes conn %default authby=rsasig leftrsasigkey=%cert rightrsasigkey=%cert

[strongSwan] IKEv2 - IKE_AUTH request problem

2012-02-14 Thread gowrishankar
Hi, Appreciating anyone willing to suggest possible cause(s) for the below problem found in Test IKEv2.EN.I.1.1.1.3: Use of CHILD_SA (TAHI IKEv2 test suite). I am using strongswan version of 4.5.2, for a endnode- endnode test, in RHEL6.2 environment. IKE_SA_INIT is established between NUT (node

[strongSwan] Restarting ipsec on the left requires restart on the right

2012-02-14 Thread Andreas Ntaflos
Hi, I observed this on a pretty vanilla tunnel setup between two servers, using Ubuntu 10.04/StrongSwan 4.3.2 on the left and Ubuntu 11.10/StrongSwan 4.5.2 on the right, with IKEv1. Issuing an ipsec restart on the left end of the tunnel seems to kill the connection and it won't come back until I