Re: [strongSwan] Does strongswan support DSCP mark feature

2009-07-29 Thread Andreas Steffen
Hi Iris, strongSwan is able to set up multiple concurrent IPsec SAs between two hosts, the Linux netfilter kernel module is able to filter traffic according to DSCP marking but the Linux kernel currently unfortunately is not able to assign plaintext traffic according to their DSCP marking to

[strongSwan] ikev2 window size for strongswan

2009-07-29 Thread Kalyani Garigipati (kagarigi)
Hi , Please give me the following info. how is the window size configured in ikev2 strongswan ? what is the default window size. Regards, Kalyani ___ Users mailing list Users@lists.strongswan.org

[strongSwan] [strongswan] Please Help, about virtual ip

2009-07-29 Thread David Deng
Hi All, I have encountered the following problem. Can you support me and give me a good solution or clue for this problem? Thanks in advance! Version of strongswan used for testing: 4.3.3 Problem is: In the scene of host-host case, whether or not one peer can request one virtual IP from

Re: [strongSwan] Configuration problems: road warrior and PSK, no connection

2009-07-29 Thread Andreas Ntaflos
On Wednesday 29 July 2009 16:11:42 Andreas Steffen wrote: Usually split-tunneling is not allowed in remote access. Therefore I suggest to try rightsubnet=0.0.0.0/0 Thanks again for the reply! Unfortunately it makes no difference :( Turning up the debug level to all now confirms that there

Re: [strongSwan] Help - received AUTHENTICATION_FAILED notify error

2009-07-29 Thread Adam Gerosa
Thanks Andreas for your very fast answer. I did what you said but I got the same error. dave:/etc/ipsec.d# ipsec up home initiating IKE_SA 'home' to 192.168.0.216 IKE_SA 'home' state change: CREATED = CONNECTING generating IKE_SA_INIT