|
Hello, I'm trying to connect my Draytek router to a debian VPS with strongswan 5.2.1 installed. The configurations files for strongswan are: # ipsec.conf - strongSwan IPsec configuration file # basic configuration config setup # Add connections here. conn vigor auto=start authby=secret keyexchange=ike left=VPS_IP right=DRAYTEK_WAN_IP #ipsec.secrets VPS_IP DRAYTEK_WAN_IP : PSK "mysecret" I'm getting always the same error (no matching CHILD_SA config found). Here is the log: pr 20 10:18:34 debian charon: 04[IKE] IKE_SA vigor[23] established between VPS_IP[VPS_IP]...DRAYTEK_WAN_IP[DRAYTEK_WAN_IP] Apr 20 10:18:34 debian charon: 04[IKE] scheduling reauthentication in 10253s Apr 20 10:18:34 debian charon: 04[IKE] maximum IKE_SA lifetime 10793s Apr 20 10:18:34 debian charon: 04[ENC] generating ID_PROT response 0 [ ID HASH ] Apr 20 10:18:34 debian charon: 04[NET] sending packet: from VPS_IP[500] to DRAYTEK_WAN_IP[500] (76 bytes) Apr 20 10:18:34 debian charon: 03[NET] received packet: from DRAYTEK_WAN_IP[500] to VPS_IP[500] (188 bytes) Apr 20 10:18:34 debian charon: 03[ENC] parsed QUICK_MODE request 101025479 [ HASH SA No ID ID ] Apr 20 10:18:34 debian charon: 03[IKE] no matching CHILD_SA config found Apr 20 10:18:34 debian charon: 03[ENC] generating INFORMATIONAL_V1 request 1880426725 [ HASH N(INVAL_ID) ] Apr 20 10:18:34 debian charon: 03[NET] sending packet: from VPS_IP[500] to DRAYTEK_WAN_IP[500] (76 bytes) Apr 20 10:18:37 debian charon: 02[NET] received packet: from DRAYTEK_WAN_IP[500] to VPS_IP[500] (188 bytes) Apr 20 10:18:37 debian charon: 02[IKE] received retransmit of request with ID 101025479, but no response to retransmit Can someone help me? Thank you Best regards -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Valter Filipe Miranda Castelão da Silva Escola Superior de Tecnologia e Gestão de Águeda Universidade de Aveiro 3810-193 AVEIRO Portugal Contactos/Contacts: email : [email protected] [email protected] web : http://www.estga.ua.pt/PagePerson.aspx?id=1876&b=1 http://www.it.pt/person_detail_p.asp?ID=4438 http://paginas.fe.up.pt/~ftt/index.html Tel./Phone : (+351) 234 611 500 41133 (Extensão UA/Internal) 9453 (Extensão UA móvel/Mobile internal) |
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
