Re: [strongSwan] [StrongSwan] IKE_AUTH packet not reaching the VPN gateway

2014-01-06 Thread Ccf Cloud
for these packets. --Regards Sam On Fri, Jan 3, 2014 at 3:27 PM, Ccf Cloud ccfcl...@gmail.com wrote: Hi Martin, On Fri, Jan 3, 2014 at 3:02 PM, Martin Willi mar...@strongswan.orgwrote: Hi Sam, The tcp dump logs from my Android device show that the IKE_AUTH messages are being sent from

Re: [strongSwan] [StrongSwan] IKE_AUTH packet not reaching the VPN gateway

2014-01-03 Thread Ccf Cloud
Hi Martin, On Fri, Jan 3, 2014 at 3:02 PM, Martin Willi mar...@strongswan.org wrote: Hi Sam, The tcp dump logs from my Android device show that the IKE_AUTH messages are being sent from the Android device. Does that IKE_AUTH get fragmented? Any IP fragment restrictions on that path?

[strongSwan] [StrongSwan] IKE_AUTH packet not reaching the VPN gateway

2014-01-02 Thread Ccf Cloud
Hi, I'm seeing this issue when I try to connect to my VPN gateway (Linux box) with some public IP. I see that IKE_SA_INIT messages are exchanged successfully between my Android device and my VPN gateway. However, the next message, IKE_AUTH, never reaches the gateway. The tcp dump logs from my

[strongSwan] Issues with EAP-AKA Authentication

2013-12-17 Thread Ccf Cloud
Hi, I'm trying to use EAP AKA authentication for authenticating the client. As specified in the test scenarios, the Authentication module reads the AKA credentials from /etc/ipsec.secrets file. However with this configuration, the EAP authentication fails with following log message at the client

Re: [strongSwan] Issues with EAP-AKA Authentication

2013-12-17 Thread Ccf Cloud
Hi Martin, I enabled eap-aka-3gpp2 module during build configurations, however I do not see that loaded during run time. I get following message here: *loaded plugins: androidbridge charon android-log openssl fips-prf random nonce pubkey pkcs1 pkcs8 pem xcbc hmac socket-default kernel-netlink

Re: [strongSwan] Using TAP interface for strongswan

2013-11-25 Thread Ccf Cloud
Hi, Can some one please answer this question? On Mon, Nov 18, 2013 at 6:13 PM, Ccf Cloud ccfcl...@gmail.com wrote: Hi, Is it possible to use TAP interface instead of TUN for establishing end to end tunnel using strongSwan. My problem is this: I want to bridge the tunnel interface

[strongSwan] Using TAP interface for strongswan

2013-11-18 Thread Ccf Cloud
Hi, Is it possible to use TAP interface instead of TUN for establishing end to end tunnel using strongSwan. My problem is this: I want to bridge the tunnel interface with some other existing interface. Now since tun is an IP layer PPP link, I cannot add it to the bridge interface. However,

Re: [strongSwan] Using TAP interface for strongswan

2013-11-18 Thread Ccf Cloud
strongSwan works on layer 3. If you want to bridge on layer 2, you need to use l2tp inside the tunnel or other software that can tunnel layer 2. Regards Noel Kuntze On 18.11.2013 13:43, Ccf Cloud wrote: Hi, Is it possible to use TAP interface instead of TUN for establishing end to end tunnel

Re: [strongSwan] trouble with the traffic selector

2013-10-25 Thread Ccf Cloud
Hi Martin, Thanks for the quick reply. On Thu, Oct 24, 2013 at 12:45 PM, Martin Willi mar...@strongswan.orgwrote: Hi, I want to route all the traffic originating from android device to be tunneled through the gateway using the tun0 interface. The Android App does no narrowing itself,

Re: [strongSwan] trouble with the traffic selector

2013-10-25 Thread Ccf Cloud
On Fri, Oct 25, 2013 at 11:27 AM, Ccf Cloud ccfcl...@gmail.com wrote: Hi Martin, Thanks for the quick reply. On Thu, Oct 24, 2013 at 12:45 PM, Martin Willi mar...@strongswan.orgwrote: Hi, I want to route all the traffic originating from android device to be tunneled through

Re: [strongSwan] trouble with the traffic selector

2013-10-25 Thread Ccf Cloud
Hi Martin, Okay so that explains the presence of the routes. But what about all the ESP packets going through wlan0 interface. Shouldn't they go through the tun0? On Fri, Oct 25, 2013 at 1:09 PM, Martin Willi mar...@strongswan.org wrote: Hi, With this when I run tcpdum on both tun0 and

Re: [strongSwan] trouble with the traffic selector

2013-10-25 Thread Ccf Cloud
some thing in this regards On Fri, Oct 25, 2013 at 1:50 PM, Mihai Maties mi...@xcyb.org wrote: On Fri, Oct 25, 2013 at 8:58 AM, Ccf Cloud ccfcl...@gmail.com wrote: Okay so that explains the presence of the routes. But what about all the ESP packets going through wlan0 interface. Shouldn't they go

[strongSwan] trouble with the traffic selector

2013-10-23 Thread Ccf Cloud
Hi, I'm facing some difficulty in selecting proper traffic selector. I'm using strongswan 5.2 to establish secure tunnel between the android device and Linux gateway (10.10.10.1). The android device requests a virtual IP 10.10.11.4 from the gateway and the and gateway assigns the same to the new

[strongSwan] [Strongswan][Error] EAP-SIM based radius authentication fails.

2013-10-08 Thread Ccf Cloud
Hi, I'm trying to establish a tunnel between my Android device and a Linux box (Gateway). I want to use EAP-SIM authentication for which I added triplets.dat in /etc/ipsec.d. My radius server is Linux hostapd server. My problem is the radius server returns EAP-FAILURE every time and the logs

Re: [strongSwan] [Strongswan][Error] Loaded 0 Radius server configurations

2013-10-06 Thread Ccf Cloud
Hi Martin, Thanks for the quick guidance. On Fri, Oct 4, 2013 at 3:51 PM, Martin Willi mar...@strongswan.org wrote: For my setup all the configurations are read from /usr/local/etc/*.conf. ./configure [...] --with-strongswan-conf ./configure --help says: --with-strongswan-conf=arg

[strongSwan] [Strongswan][Error] Loaded 0 Radius server configurations

2013-10-04 Thread Ccf Cloud
Hi, I'm trying to create a secure tunnel between my mobile device (Android) and a gateway (Linux box). I need an EAP-SIM based authentication with the radius server. For this I compiled the strongswan library with --enable-eap-sim, --enable-eap-sim-file and --enable-eap-radius options on both the

Re: [strongSwan] [Strongswan][Error] Loaded 0 Radius server configurations

2013-10-04 Thread Ccf Cloud
Hi Martin, Thanks for the reply. Few followup questions: On Fri, Oct 4, 2013 at 1:20 PM, Martin Willi mar...@strongswan.org wrote: Hi Sam, I need an EAP-SIM based authentication with the radius server. For this I compiled the strongswan library with --enable-eap-sim,