Re: [strongSwan] pluto and charon (IKEV1 and IKEV2) clients on the same machine simultaneously

2012-03-27 Thread Andreas Steffen
Hello Morgan, yes of course this works. I've been running pluto and charon on the same physical machinee for years. pluto binds to UDP sockets 500 and 4500 and charon gets its packets via the socket-raw plugin. Regards Andreas On 03/28/2012 12:35 AM, Morgan Yang wrote: > Hello: > > I'm wonderi

[strongSwan] uniqueids

2012-03-27 Thread Peter Sagerson
Here's another question, and I hope it will be easier, more interesting, and less lame than my last. I see that both pluto and charon support the uniqueids option, which ensures that each peer ID can only connect from one IP at a time. I have a situation where some peers are generating multiple

[strongSwan] pluto and charon (IKEV1 and IKEV2) clients on the same machine simultaneously

2012-03-27 Thread Morgan Yang
Hello: I'm wondering has ever ran both clients on the same machine (non-VM) simultaneously, if its possible at all? Much Thanks Morgan ___ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users

Re: [strongSwan] Upgrade issue

2012-03-27 Thread Peter Sagerson
Hallelujah! Predictably, this was a comedy of errors, including syntax changes in ipsec.secrets leading to a line getting lost. Also, mysteriously, strongSwan was unable to parse the private key even when it was trying. Not sure why, as it was fixed by simply washing it through `openvpn rsa` aga

Re: [strongSwan] Listing multiple IP addresses on the rightsubnet

2012-03-27 Thread Mohammady Mahdy
Thank you :) -Original Message- From: Andreas Steffen [mailto:andreas.stef...@strongswan.org] Sent: Tuesday, March 27, 2012 11:30 AM To: Mohammady Mahdy Cc: users@lists.strongswan.org Subject: Re: [strongSwan] Listing multiple IP addresses on the rightsubnet The workaround is to define m

Re: [strongSwan] Upgrade issue

2012-03-27 Thread Tobias Brunner
Hi Peter, > I'm attaching the full control+controlmore logs from both versions in > case anyone's interested (IP redacted). A diff shows them effectively > identical until after the "full match" lines. Actually, I think that the problem is caused by an earlier difference in the logs: 4.4.0: > lo

Re: [strongSwan] Listing multiple IP addresses on the rightsubnet

2012-03-27 Thread Andreas Steffen
The workaround is to define multiple connections: conn c1 also=c0 rightsubnet=10.122.193.172/32 auto=start conn c2 also=c0 rightsubnet=110.124.196.172/32 auto=start ... conn c0 left=.. leftid=.. right=.. rightid=.. ... resulting in a single