Re: [strongSwan] Cannot do IKEv1/PSK Main Mode in Cisco ASA 5510

2012-09-28 Thread Neeraj Sharma
ipsec.conf? Neeraj Sharma kaj...@live.in wrote: I tried doing this a couple of times and did succeed with configuring a StrongSwan client connecting to a Cisco ASA 5510 in IKEv1/PSK Main Mode. What works at present is the IKEv1/PSK Aggressive mode. I am no Cisco expert, so its possible (pointed

[strongSwan] Cannot do IKEv1/PSK Main Mode in Cisco ASA 5510

2012-09-27 Thread Neeraj Sharma
I tried doing this a couple of times and did succeed with configuring a StrongSwan client connecting to a Cisco ASA 5510 in IKEv1/PSK Main Mode. What works at present is the IKEv1/PSK Aggressive mode. I am no Cisco expert, so its possible (pointed by endre that it works as well over freenode

[strongSwan] need closeaction for IKEv1

2012-09-26 Thread Neeraj Sharma
I require closeaction functionality on IKEv1 as it exists **only** on IKEv2 and I am stuck with IKEv1 at present. I had a brief discussion over freenode around this subject and supposedly there are some challenges. At present its irritating for me to ensure (either manually or via script) to

Re: [strongSwan] Cisco ASA 5510 (8.4) Interop with StrongSwan 4.5.2 (IKEv2)

2012-09-26 Thread Neeraj Sharma
Hi Martin, I was focusing on IKEv1 xauthrsasig due to constraints in making basic stuff work, but will definitely try to retest IKEv2 at some point next month. Thanks,Neeraj Subject: Re: [strongSwan] Cisco ASA 5510 (8.4) Interop with StrongSwan 4.5.2 (IKEv2) From: mar...@strongswan.org

Re: [strongSwan] Cisco ASA 5510 (8.4) Interop with StrongSwan 4.5.2 (IKEv2)

2012-09-26 Thread Neeraj Sharma
Hi Martin, I was focusing on IKEv1 xauthrsasig due to constraints in making basic stuff work, but will definitely try to retest IKEv2 at some point next month. Thanks, Neeraj Subject: Re: [strongSwan] Cisco ASA 5510 (8.4) Interop with StrongSwan 4.5.2 (IKEv2) From: mar...@strongswan.org

[strongSwan] Cisco ASA 5510 (8.4) Interop with StrongSwan 4.5.2 (IKEv2)

2012-09-04 Thread Neeraj Sharma
Hi, I am trying to interoperate the StrongSwan (IKEv2) client with Cisco ASA 5510 (v8.4.1), but it doesnt work. After some rigourous testing I was able to make StrongSwan work with Cisco ASA, but only the IKEv1 (authby=xauthrsasig). The Cisco ASA is giving some strange errors and what appears to