[strongSwan] Strongswan 5.6.3 rekey every 30 seconds

2018-07-23 Thread Doug Tucker
:02 ip-x-x-x-x charon: 12[ENC] parsed QUICK_MODE request 1506132661 [ HASH ] Jul 24 03:1x:02 ip-x-x-x-x charon: 12[IKE] CHILD_SA sph-main{3} established with SPIs c3cf290a_i 1cab665a_o and TS x.x.0.0/16 === x.x.x.x/2x Thank you in advance for any insight into resolving this. Sincerely, Doug Tucker

Re: [strongSwan] Strongswan 5.6.3 rekey every 30 seconds

2018-07-24 Thread Doug Tucker
of the feedback. Doug Tucker Sr. Network Administrator o: 817.975.5832 | m: 817.975.5832 e: doug.tuc...@newscycle.com [Newscycle Solutions]<http://www.newscycle.com/> Breakthrough technologies for media Twitter<http://www.twitter.com/newscycle_news> | Facebook<https://w

Re: [strongSwan] Strongswan 5.6.3 rekey every 30 seconds

2018-07-24 Thread Doug Tucker
sph-main{9}: x.x.x.x/16 === x.x.x.x/28 Doug Tucker Sr. Network Administrator o: 817.975.5832 | m: 817.975.5832 e: doug.tuc...@newscycle.com [Newscycle Solutions]<http://www.newscycle.com/> Breakthrough technologies for media Twitter<http://www.twitter.com/newsc

Re: [strongSwan] Strongswan 5.6.3 rekey every 30 seconds

2018-07-24 Thread Doug Tucker
I have auto = ignore, closeaction = clear, and have not defined anything for uniqueids. Doug Tucker Sr. Network Administrator o: 817.975.5832 | m: 817.975.5832 e: doug.tuc...@newscycle.com [Newscycle Solutions]<http://www.newscycle.com/> Breakthrough technologies for media T

[strongSwan] remote peer IP falls into crypto domain right subnet

2018-09-26 Thread Doug Tucker
IP from the routing table but with strongswan 5.6.3 it appears to not do so by default and caused some odd routing anomalies to this IP. Does anyone know of a configuration directive for dealing with this? Doug Tucker Sr. Network Administrator o: 817.975.5832 | m: 817.975.5832 e: doug.tuc

[strongSwan] tunnel up, traffic stops flowing

2019-03-06 Thread Doug Tucker
to correct? Doug Tucker Sr. Network Administrator o: 817.975.5832 | m: 817.975.5832 e: doug.tuc...@newscycle.com [Newscycle Solutions]<http://www.newscycle.com/> Breakthrough technologies for media Twitter<http://www.twitter.com/newscycle_news> | Facebook<https://w

Re: [strongSwan] tunnel up, traffic stops flowing

2019-03-07 Thread Doug Tucker
os.org/; BUG_REPORT_URL="https://bugs.centos.org/; CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" CentOS Linux release 7.6.1810 (Core) CentOS Linux release 7.6.1810 (Core)

[strongSwan] leftsubnet stanza

2019-06-05 Thread Doug Tucker
but it doesn't like that) using leftsubnet = 0.0.0.0/0 works, but that apparently opens it to any subnet on my side they have a mapping to on theirs...so I lose control. Is there any way to have multiple subnets on my side on one line? Doug Tucker Sr. Director of Networking & Linux Operation

[strongSwan] left subnet stanza

2019-07-01 Thread Doug Tucker
but it doesn't like that) using leftsubnet = 0.0.0.0/0 works, but that apparently opens it to any subnet on my side they have a mapping to on theirs...so I lose control. Is there any way to have multiple subnets on my side on one line? Doug Tucker Sr. Director of Networking & Linux Operation

[strongSwan] unstable tunnels

2020-02-27 Thread Doug Tucker
P CHILD_SA with SPI 55e242ba Feb 27 13:54:40 ip-2.2.2.2 charon: 09[IKE] CHILD_SA not found, ignored Doug Tucker Sr. Director of Networking & Linux Operations o: 817.975.5832 | m: 817.975.5832 e: doug.tuc...@navigaglobal.com [cid:9b32ac9a-70da-4551-bc68-ebd42d85e6d4]<https://navigag

Re: [strongSwan] Connection to AWS-VPC

2020-09-17 Thread Doug Tucker
required to execute the script, check if you are running as root, mostly to do with path, /sbin/" >&2 2>&2 case "${PLUTO_VERB}" in up-client) create_interface configure_sysctl add_route ;; down-client)

Re: [strongSwan] Connection to AWS-VPC

2020-09-16 Thread Doug Tucker
="/usr/local/etc/aws-updown.sh -ln Tunnel2 -ll 169.254.x.x/30 -lr 169.254.x.x/30 -m 200 -r 10.x.x.0/20" Let me know if there is more you would like to see. Doug Tucker Sr. Director of Networking & Linux Operations o: 817.975.5832 | m: 817.975.5832 e: doug.tuc...@navigaglobal

[strongSwan] issue connecting to fortigate

2020-06-25 Thread Doug Tucker
/MODP_1536 sph-dr{71}: INSTALLED, TUNNEL, reqid 2, ESP SPIs: c2b7d129_i 0a24e7dd_o sph-dr{71}: AES_CBC_128/HMAC_SHA1_96/MODP_1536, 0 bytes_i, 0 bytes_o, rekeying in 7 hours sph-dr{71}: 1.1.0.0/16 === 2.2.0.0/28 Doug Tucker Sr. Director of Networking & Linux Operation