Re: [strongSwan] StrongSwan IPSEC/L2TP VPN Client to Zyxel USG-20W

2016-10-28 Thread Tom Jackson
I got past this issue by switching from strongswan to openswan. I never figured out what's wrong with the strongswan connection, but openswan worked more or less "out of the box" on the Linux box as did the Windows 10 native client in my earlier trials. From: U

Re: [strongSwan] ipsec routes removed when interface down and not reinstated

2016-10-28 Thread Alexander Hill
Ok, thanks. That makes sense. Triggering a reconnect on if-up should do the trick then. Cheers, Alex On Fri., 28 Oct. 2016 at 11:09 pm, Noel Kuntze wrote: > On 28.10.2016 07:07, Alexander Hill wrote: > > What's the thing that removes the route when the network cable is > unplugged - and can tha

Re: [strongSwan] ipsec routes removed when interface down and not reinstated

2016-10-28 Thread Noel Kuntze
On 28.10.2016 07:07, Alexander Hill wrote: > What's the thing that removes the route when the network cable is unplugged - > and can that thing also re-add the route when it's plugged back in? I think the kernel does that. There's no userspace component involved in this. But it doesn't add anyth

Re: [strongSwan] Certificate authentication issue

2016-10-28 Thread Noel Kuntze
On 28.10.2016 10:28, Joe O wrote: > “Deleting half open IKE_SA after timeout message” I don't see that message in the log you posted. It generally means that the other peer did not respond to an IKE message when it should have. You should add "fragmentation=yes" to all conns (or add it to a conn

[strongSwan] Certificate authentication issue

2016-10-28 Thread Joe O
I am having some issues with certificate authentication. I’ve generated a .p12 certificate and imported it into my mac. Everything looks good and according to the strongswan logs I am successfully authenticating. However, I am also getting “Deleting half open IKE_SA after timeout message” Here

[strongSwan] Testing

2016-10-28 Thread Andreas Steffen
Testing the availability of the strongSwan mailing list server. Please disregard Andreas == Andreas Steffen andreas.stef...@strongswan.org strongSwan - the Open Source VPN Solution! www.strongswa