Re: [strongSwan] Route based VPN in Linux

2018-04-16 Thread Andrii Petrenko
https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN --- Andrii Petrenko apl...@gmail.com > On Apr 16, 2018, at 11:26, Kaushal Shriyan wrote: > > Hi, > > I will appreciate if anyone

[strongSwan] Route based VPN in Linux

2018-04-16 Thread Kaushal Shriyan
Hi, I will appreciate if anyone can point me to a doc to setup Route based VPN in Linux using VTI Thanks in Advance. I look forward to hearing from you. Best Regards, Kaushal

Re: [strongSwan] IKE_SA_INIT response with notification data missing

2018-04-16 Thread Tobias Brunner
> Is there any reason why UDP checksum in the packet shows as wrong in the > wireshark? Possibly hardware checksum offloading [1]. Regards, Tobias [1] https://wiki.wireshark.org/CaptureSetup/Offloading

Re: [strongSwan] IKE_SA_INIT response with notification data missing

2018-04-16 Thread Balaji Thoguluva Bapulal
Thanks Andreas, will take a look at it. Is there any reason why UDP checksum in the packet shows as wrong in the wireshark? -Original Message- From: Andreas Steffen [mailto:andreas.stef...@strongswan.org] Sent: Monday, April 16, 2018 5:04 AM To: Balaji Thoguluva Bapulal

Re: [strongSwan] IKE_SA_INIT response with notification data missing

2018-04-16 Thread Andreas Steffen
Hi Balaji, RFC 4739 "Multiple Authenticaton Exchanges in IKEv2" https://tools.ietf.org/html/rfc4739#section-3.1 defines the format of the MULTIPLE_AUTH_SUPPORT Notify Payload as 3.1. MULTIPLE_AUTH_SUPPORTED Notify Payload The MULTIPLE_AUTH_SUPPORTED notification is included in the