[strongSwan] Database logging for sqlite3 (for ipsec pool)

2015-06-18 Thread divya mohan
Hi, I'm using sqlite3 for storing leases (via ipsec pool). I would like to get some logs (either in syslog; or in a separate database table for logs) when there is any insert/update/delete done on the leases table. I assume this might be achievable by using 'CREATE TRIGGER' statements in the db t

[strongSwan] Issue with load-tester

2015-06-18 Thread sunny kumar
Hi, I am trying client-server eap-aka scenario. I am able to get the connection established for normal strongswan client and strongswan server. Now when I am trying to the same strongswan server with load-tester client, then connection fails. In log file on load-tester client side I can see

[strongSwan] strongswan from within linux container/docker

2015-06-18 Thread SM K
Hi, Is it possible to run strongswan from within a LxC or docker instance? Has anyone been able to get this to work? -sk ___ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users

Re: [strongSwan] forecast iptables commit failed: Invalid argument

2015-06-18 Thread Meduri Siva Prasad
Hi Martin, Thanks for the reply. We are working on ARM platform with kernel 3.2. Kernel also supports udp/esp as match fields and MARK as target. Any inputs for debugging will be a great help. BTW we are testing this in site-to-site deployment. But as per documentation, it talks only for client

Re: [strongSwan] forecast iptables commit failed: Invalid argument

2015-06-18 Thread Martin Willi
Hi, > OpenWrt daemon.info charon: 15[CFG] forecast iptables commit failed: Invalid > argument Please check that your kernel supports the MARK target and the udp/esp matches. What architecture is OpenWRT running on? Not unlikely that it is an alignment issue, I didn't test the plugin beyond x86/

[strongSwan] forecast iptables commit failed: Invalid argument

2015-06-18 Thread Meduri Siva Prasad
Hi , Wanted to forward multicast traffic using FORECAST plugin from HOST1. Tunnel established successfully between GATEWAY1 and GATEWAY2 in site-to site mode. Sent Multicast traffic from HOST1 which is behind the GATEWAY1. But the IPTABLES RULES are not updated . LOG says "forecast iptables com