[strongSwan] strongSwan consulting

2017-11-20 Thread Jeff
Does the strongSwan project still provide consulting services? I have been unable to reach the posted consulting contact andreas.stef...@strongswan.org . thanks, Jeff

Re: [strongSwan] StrongSwan Android app, NO_PROPOSAL_CHOSEN error & Digital Ocean's VPN tutorial

2017-11-20 Thread Bugakov, Alexander
Sorry for wasting your time; I instead used a recipe provided at https://github.com/jawj/IKEv2-setup and it configured StrongSwan for me flawlessly - now works with Android and Windows 10 clients. Works like a charm, much faster and better than commercial VPN providers. On Mon, Nov 20, 2017 at

Re: [strongSwan] StrongSwan Android app, NO_PROPOSAL_CHOSEN error & Digital Ocean's VPN tutorial

2017-11-20 Thread Anvar Kuchkartaev
You can try to remove/comment out lines of ike= and esp= and try to connect to server (leaving it to use default strongswan ciphers). Anvar Kuchkartaev  an...@anvartay.com    Original Message   From: Bugakov, Alexander Sent: lunes, 20 de noviembre de 2017 04:30 p.m. To:

Re: [strongSwan] StrongSwan Android app, NO_PROPOSAL_CHOSEN error & Digital Ocean's VPN tutorial

2017-11-20 Thread Andreas Steffen
Hi Alexander, could you increase the debug level to "cfg 2" on the server which would show the received and installed crypto algorithms. Regards Andreas On 20.11.2017 16:30, Bugakov, Alexander wrote: > Hello, > > I tried to install StrongSwan IKEv2 on DigitalOcean's freshly > configured

Re: [strongSwan] what the use (effect) of "righthostaccess=yes"

2017-11-20 Thread Rajiv Kulkarni
Hello Andreas Thanks for the help.. Yes!!! It works!I did just as mentioned in the example shown by you == root@lssimgw2:/usr/local/etc# root@lssimgw2:/usr/local/etc# root@lssimgw2:/usr/local/etc# ipsec statusall

[strongSwan] StrongSwan reply to system in error case

2017-11-20 Thread Alexander.Camek
Hi, Currently StrongSwan logs every information. Additionally, you can get a lot of information when you start ipsec with --nofork --all. But, is it possible to get a reply directly from strongswan? Especially, when there is a certificate error or mismatch, or if ipsec / ike has some other

Re: [strongSwan] what the use (effect) of "righthostaccess=yes"

2017-11-20 Thread Andreas Steffen
Hi Rajiv, if "left" is local and "right" is remote then only leftfirewall and lefthostaccess are defined. rightfirewall and righthostaccess are used when "right" is local and "left" is remote as in the following scenario where sides are swapped:

[strongSwan] StrongSwan Android app, NO_PROPOSAL_CHOSEN error & Digital Ocean's VPN tutorial

2017-11-20 Thread Bugakov, Alexander
Hello, I tried to install StrongSwan IKEv2 on DigitalOcean's freshly configured server using this tutorial - https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-16-04 I created fresh Ubuntu instance, got an IP address 128.199.36.88 and

[strongSwan] what the use (effect) of "righthostaccess=yes"

2017-11-20 Thread Rajiv Kulkarni
Hi I have a ipsec tunnel deployed/configured as below: PC1(lan)[GW1](wan)=IPSEC(wan)[GW2](lan)---PC2 PC1-ipaddr: 192.168.22.x PC2-ipaddr: 192.168.25.x GW1-lan-ipaddr: 192.168.22.1 GW2-lan-ipaddr: 192.168.25.1 I see that to allow access to 192.168.22.1 from PC2 (via the ipsec

Re: [strongSwan] IPSec+L2TP connection randomly drops

2017-11-20 Thread Noel Kuntze
It's certainly not something with strongSwan. Maybe Windows tries to access some URL to check connectivity, like Android and iOS do. On 19.11.2017 17:03, Mek wrote: > In the meantime, the connection dropped even if it was active, e.g. there was > a video stream going through. And the connection