Hello Renato, which strongSwan version are you using? Starting with 4.5.0 the default for
keyexchange=ike switched from ikev1 to ikev2. Therefore pluto wouldn't see your IKEv2 connection definition. Regards Andreas On 19.12.2010 04:38, renato gallo wrote: > please I pray you HELP. > > the problem is ..... > > packet from 84.202.150.225:500: initial Main Mode message received on > 192.168.0.5:500 but no connection has been authorized with policy=PSK > > > cat ipsec.secrets > # /etc/ipsec.secrets - strongSwan IPsec secrets file > : PSK "not posting the pass" > > cat ipsec.conf > # ipsec.conf - strongSwan IPsec configuration file > > config setup > interfaces="ipsec0=eth0" > plutostart=yes > charonstart=yes > plutodebug=all > strictcrlpolicy=yes > nat_traversal=yes > klipsdebug=all > uniqueids=yes > > conn fvx538 > authby=secret #tells it to use a PSK for authentication > type=tunnel > left= %defaultroute #WAN ip address of local CC router > leftsubnet=192.168.0.0/24 #ip address of CC LAN subnet > leftnexthop=192.168.0.3 #ip address of local CC?s internet gateway > leftid=82.148.186.244 #WAN IP > right=84.202.150.225 #WAN ip address of remote netgear fvs318 > rightnexthop=84.202.150.225 #ip address of remote netgear?s > internet gateway > rightsubnet=10.0.0.0/24 #ip address of netear LAN subnet > rightid=84.202.150.225 #WAN IP > ike=3des-sha1-modp1024 #ike policy settings, could not get > aes128 or aes256 to work > ikelifetime=1440m #ike lifetime > keylife=480m #key life > pfs=no #pfs is off, could not get pfs working > keyexchange=ike #tell it to use ike(not AH) > auto=start #start when ipsec(openswan) starts > esp=3des-sha1 #phase 2 encryption, no pfs defined. Netgear > ?VPN policy? ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
