Hi Hamid, > Oct 27 09:25:06 4 charon: 16[ENC] generating INFORMATIONAL_V1 request > 2434938569 [ N(INVAL_KE) ]
There are several possible reasons why charon would respond with an INVALID_KEY_INFORMATION notify, but for most the actual reason is logged. There seems to be one scenario where this is not the case and that is if no PSK is found during IKEv1 Main Mode. The line > moon.strongswan.org %any : PSK "test123456" in your ipsec.secrets file won't match as charon does not resolve FQDNs in ipsec.secrets and moon.strongswan.org is not used as identity by your gateway. Just use > : PSK "test123456" instead. That there is no explicit log message is incorrect and should be fixed with [1]. Regards, Tobias [1] http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=f30962de _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
