Re: [strongSwan] request help

Hi, according to the 5th paragraph in section 3.3. Security Association Payload of the IKEv2 RFC 4706: http://tools.ietf.org/html/rfc4306#section-3.3 Each Proposal/Protocol structure is followed by one or more transform structures. The number of different transforms is generally

Re: [strongSwan] help? charon too long to start

Hi, it is impossible to see from your log why charon takes so long to start. Could you disable the starting of the IKEv1 pluto daemon in /etc/ipsec.conf: config setup plutostart=no and start the charon daemon without forking: ipsec start --nofork and report what is happening.

[strongSwan] need some help : ipsec + xl2tpd

Hello, Please forgive me for my bad english. I have trouble to get working my ipsec + xl2tpd nated VPN. My arch is : VPN BOX : 192.168.1.116/24 Left Gateway : 192.168.1.1/24 Left public @ : 217.128.239.224 I'm testing from : Right Public @ : 82.229.55.165 Right gateway :

Re: [strongSwan] need some help : ipsec + xl2tpd

Hi Reza, the problem is the following: cannot respond to IPsec SA request because no connection is known for 217.128.239.224/32===192.168.1.116:4500 [C=FR, ST=France, O=Olympe CTI, OU=Ingenierie informatique, CN=vpn.olympecti.fr, e=cont...@olympecti.fr] :17/%any ... 82.229.55.165:4500

Re: [strongSwan] need some help : ipsec + xl2tpd

what is the output of ipsec statusall ? the connection definition shown by ipsec statusall must *exactly* match the peer's connection proposal. Andreas Reza ISSANY wrote: Thanks for your help. I've changed the line leftsubnet=192.168.1.0/24 by leftsubnet=217.128.239.224/32 But I

Re: [strongSwan] need some help : ipsec + xl2tpd

Where can I find the connection definition and the peers connection proposal ? integration:/appli/strongswan# sbin/ipsec statusall 000 interface lo/lo ::1:500 000 interface lo/lo 127.0.0.1:4500 000 interface lo/lo 127.0.0.1:500 000 interface eth0/eth0 192.168.1.116:4500 000 interface