Re: [strongSwan] Cannot do IKEv1/PSK Main Mode in Cisco C7200

2013-05-30 Thread Somaye Khaleghi
i finaly soled it problem, my configs are : cisco config is : Router1# hostname Router1 crypto isakmp policy 5 encr 3des hash md5 authentication pre-share group 2 lifetime 3600 crypto isakmp key 123456 address 192.168.0.1 ! crypto ipsec transform-set MINE esp-3des esp-md5 ! ip access-list

Re: [strongSwan] Asymmetric configuration after IKE SA rekey

2013-05-30 Thread Alan Ford
Hi all, Nobody's replied to this issue or my other, similar asymmetry issue ( https://lists.strongswan.org/pipermail/users/2013-May/009245.html). Really hoping someone could give me some pointers here on how this could be further debugged... Is there anything else I can look at here, or should

[strongSwan] Android client fails to connect with allocating SPI failed: Invalid argument (22)

2013-05-30 Thread P. J. Reed
My server is an Ubuntu 12.04 server with a public IP and the Ubuntu-provided Strongswan 4.5.2-1.2 package installed. I'm trying to set up a road warrior style configuration for an Android phone using the official Strongswan client; it is on a NAT behind a firewall that I have no control over.

Re: [strongSwan] Android client fails to connect with allocating SPI failed: Invalid argument (22)

2013-05-30 Thread Andreas Steffen
Hi, it seems that some IPsec kernel modules are missing on the strongSwan VPN server. Please check against the following list of mandatory modules: http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules Regards Andreas On 05/30/2013 04:53 PM, P. J. Reed wrote: My server is an

Re: [strongSwan] Android client fails to connect with allocating SPI failed: Invalid argument (22)

2013-05-30 Thread P. J. Reed
Thank you! My server is running on a virtual machine using a kernel provided by the host, and it seems it was missing some necessary modules. After installing my own kernel, everything is working great. P. J. On 2013-05-30 11:01, Andreas Steffen wrote: Hi, it seems that some IPsec kernel

Re: [strongSwan] DPD [lack of] interoperability between strongswan and Cisco IOS

2013-05-30 Thread Olivier PELERIN
Strongswan version 5.01 [ 10.1.1.254 is the Cisco device]. We clearly see Strongswan sending the capability in MM1 and Cisco in MM4. For what ever reason, Strongswan ignore that message. Looks like a bug to me. From: olivier_pele...@hotmail.com To: users@lists.strongswan.org Date: Wed, 29 May