Also i should say that the windows is ultimate 64-bit ( build 7601 ) and i used this http://wiki.strongswan.org/projects/strongswan/wiki/Win7CertReq completely in my setup.
if it is needed i can send ipsec.conf and ... Thank you On Mon, Aug 27, 2012 at 1:01 PM, Hamid Zamani <[email protected]> wrote: > Hello , > > I've configured a debian os with strongswan 5.0.0 and anything is good so > i can connect to that with my pc (windows 7-64bit) > but there is no way to connect to server with other PCs and windows ... > > and the common error is : " ike authentication credentials are > unacceptable" > > and the daemon.log says me : > > Aug 27 04:28:15 HAMID charon: 15[NET] received packet: from > xxx.xxx.xxx.xxx[956] to yyy.yyy.yyy.yyy[500] > Aug 27 04:28:15 HAMID charon: 15[ENC] parsed IKE_SA_INIT request 0 [ SA > KE No N(NATD_S_IP) N(NATD_D_IP) ] > Aug 27 04:28:15 HAMID charon: 15[IKE] xxx.xxx.xxx.xxx[ is initiating > an IKE_SA > Aug 27 04:28:15 HAMID charon: 15[IKE] remote host is behind NAT > Aug 27 04:28:15 HAMID charon: 15[ENC] generating IKE_SA_INIT response 0 > [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ] > Aug 27 04:28:15 HAMID charon: 15[NET] sending packet: from > yyy.yyy.yyy.yyy [500] to xxx.xxx.xxx.xxx [956] > Aug 27 04:28:16 HAMID charon: 03[NET] received packet: from > xxx.xxx.xxx.xxx [53196] to yyy.yyy.yyy.yyy [4500] > Aug 27 04:28:16 HAMID charon: 03[ENC] parsed IKE_AUTH request 1 [ IDi > CERTREQ N(MOBIKE_SUP) CP(ADDR DNS NBNS SRV ADDR6 DNS6 SRV6) SA TSi TSr ] > Aug 27 04:28:16 HAMID charon: 03[IKE] received cert request for "C=..." > Aug 27 04:28:16 HAMID charon: 03[IKE] received 11 cert requests for an > unknown ca > Aug 27 04:28:16 HAMID charon: 03[CFG] looking for peer configs matching > yyy.yyy.yyy.yyy [%any]... xxx.xxx.xxx.xxx [192.168.245.132] > Aug 27 04:28:16 HAMID charon: 03[CFG] selected peer config 'rw-eap' > Aug 27 04:28:16 HAMID charon: 03[IKE] initiating EAP_IDENTITY method (id > 0x00) > Aug 27 04:28:16 HAMID charon: 03[IKE] peer supports MOBIKE > Aug 27 04:28:16 HAMID charon: 03[IKE] authentication of 'C=...' (myself) > with RSA signature successful > Aug 27 04:28:16 HAMID charon: 03[IKE] sending end entity cert "C=..." > Aug 27 04:28:16 HAMID charon: 03[ENC] generating IKE_AUTH response 1 [ > IDr CERT AUTH EAP/REQ/ID ] > Aug 27 04:28:16 HAMID charon: 03[NET] sending packet: from > yyy.yyy.yyy.yyy [4500] to xxx.xxx.xxx.xxx [53196] > > what is the exac problem you think ? > > i sould also append that it is also happenning with ikev2(rsasig) . > > Thank you so much >
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
