Re: [strongSwan] automating Strongswan for Android with Tasker

Changing the target to Activity now has the Exit_VPN task working as expected.  Unfortunately the Enter_VPN task still does nothing.  Is it possible that the Action should be something other than "START_PROFILE" or that I need to issue another intent to connect it? Dave > Tobias Brunner wrote:

[strongSwan] automating Strongswan for Android with Tasker

I have installed the Strongswan for Android app on a Marshmallow tablet and have created a profile to allow a VPN to be opened to my home network.  Looking at the wiki I see directions on how to connect and disconnect the VPN using intents.  I have installed Tasker on the tablet and believe I have

Re: [strongSwan] automating Strongswan for Android with Tasker

Tobias Brunner wrote: > Hi David, > >> Neither of the above does anything when I run them.  If you see an error >> in the above please let me know. > arg0 and arg4 seem to be OK, but not sure about arg7. Maybe the package > name should actually be in arg6. But it's difficult to say because I've

Re: [strongSwan] automating Strongswan for Android with Tasker

Tobias Brunner wrote: > Hi David, > >> I am populating the Action, Extra and Package in the Tasker "Send >> Intent" definition as per the wiki.  When I run the task nothing happens. > Typo perhaps? > >> Is the wiki out of date?  Did I miss something required for this to >> work?  Is anyone using

Re: [strongSwan] automating Strongswan for Android with Tasker

Your eyes for this are better than mine, as I missed that difference as well.  Correcting that to match the working task now has both of them working.  I next created two state profiles, one when connected to my home WiFi network which exits the VPN and one when connected to any other WiFi network

[strongSwan] configuring android StrongSwan VPN Client 2.2.1

I followed this recipe to install StrongSwan on my linux server: How to Set Up an IKEv2 VPN Server with StrongSwan on Ubuntu 16.04 This is working fine with a Windows client, so I

Re: [strongSwan] configuring android StrongSwan VPN Client 2.2.1

onfiguration. > Actually Windows Clients be made secure by enabling modp2048 via the > Windows registry: > > https://wiki.strongswan.org/projects/strongswan/wiki/WindowsClients#AES-256-CBC-and-MODP2048 > > Best regards > > Andreas > > On 07.01.20 17:31, David H. Durgee wrot

Re: [strongSwan] revisiting problem with linux to VPN using network-manager-strongswan 1.4.5-2.1

an understanding for it. GUI indicators are not inherently related to if any tunnel exists, or works. Kind regards Noel Am 01.07.21 um 20:31 schrieb David H Durgee: I thought it might make sense to revisit this after the progress that has been made. It now appears that the connection is being established

Re: [strongSwan] problem connecting linux laptop to VPN using network-manager-strongswan 1.4.5-2.1

/ /University Information Services / /University of Cambridge/ *From:* Users on behalf of David H Durgee *Sent:* Sunday, June 27, 2021 10:42 pm *To:* users@lists.strongswan.org *Subject:* [strongSwan] problem connecting

Re: [strongSwan] problem connecting linux laptop to VPN using network-manager-strongswan 1.4.5-2.1

Michael Schwartzkopff wrote: On 28.06.21 15:34, David H Durgee wrote: Michael Schwartzkopff wrote: On 28.06.21 13:44, David H Durgee wrote: I added that package and got further this time: (...) Jun 28 07:33:58 Z560 charon-nm: 06[ENC] parsed IKE_AUTH response 5 [ AUTH N(MOBIKE_SUP) N

Re: [strongSwan] problem connecting linux laptop to VPN using network-manager-strongswan 1.4.5-2.1

hat else I need to change via the GUI. Thanks in advance. Dave Noel Kuntze wrote:  Set "Request an inner IP address". Am 28.06.21 um 15:55 schrieb David H Durgee: Michael Schwartzkopff wrote: On 28.06.21 15:34, David H Durgee wrote: Michael Schwartzkopff wrote: On 28.06.21 13:44,

Re: [strongSwan] revisiting problem with linux to VPN using network-manager-strongswan 1.4.5-2.1

efault builds policy based tunnels, not route based tunnels. Thus no interface is needed or created. Read up on how IPsec works on the wiki to get an understanding for it. GUI indicators are not inherently related to if any tunnel exists, or works. Kind regards Noel Am 01.07.21 um 20:31 schr

Re: [strongSwan] revisiting problem with linux to VPN using network-manager-strongswan 1.4.5-2.1

6 11:52:41 Z560 charon-nm: 11[IKE] uninstalling bypass policy for 169.254.0.0/16 Jul  6 11:52:41 Z560 charon-nm: 11[IKE] uninstalling bypass policy for fe80::/64 Jul  6 11:52:41 Z560 wpa_supplicant[818]: nl80211: deinit ifname=wlp5s0 disabled_11b_rates=0 Jul  6 11:52:46 Z560 systemd[1]: systemd-rf

Re: [strongSwan] revisiting problem with linux to VPN using network-manager-strongswan 1.4.5-2.1

to fix this?  If not, what additional information do you need, either from the laptop or the server?  I believe I have posted configuration files from both sides in this thread, but let me know if you need more information. Dave David H Durgee wrote:  I brought up the VPN over a WiFi

[strongSwan] problem connecting linux laptop to VPN using network-manager-strongswan 1.4.5-2.1

I am encountering a problem attempting to access a VPN using strongswan from my linux laptop.  I have it working from an android phone and tablet as well as a windows laptop, so I know the server is configured properly. The connection appears to start normally and then fails at the EAP

[strongSwan] revisiting problem with linux to VPN using network-manager-strongswan 1.4.5-2.1

I thought it might make sense to revisit this after the progress that has been made. It now appears that the connection is being established: Jun 29 11:21:34 Z560 charon-nm: 11[IKE] authentication of 'durgeeenterprises.publicvm.com' with EAP successful Jun 29 11:21:34 Z560 charon-nm: 11[IKE]

Re: [strongSwan] revisiting problem with linux to VPN using network-manager-strongswan 1.4.5-2.1

d tunnels, not route based tunnels. Thus no interface is needed or created. Read up on how IPsec works on the wiki to get an understanding for it. GUI indicators are not inherently related to if any tunnel exists, or works. Kind regards Noel Am 01.07.21 um 20:31 schrieb David H Durgee: I thought