<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="宋体" size="3"><span style="font-size:12pt;">
<div> </div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Hello, all</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">This is my case: I had set up the IPsec tunnel between a femto(192.168.222.8) and a VPN server(192.168.222.95),</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">If I ping from the femto to the core network 192.168.111.9, the pacakge goes through the IPsec tunnel, but we have</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">some SCTP msgs, such as INIT msg from the femto to the core network 192.168.111.9, they doesn't go through </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">the IPsec tunnel.</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> ========================================================================================================================</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Femto VPN server Core network </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">IP: 192.168.222.8 IP: 192.168.222.95 192.168.111.9</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Tunnel IP: 10.23.25.1 IP: 192.168.111.11</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> ========================================================================================================================</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">(1) We run ping 192.168.111.9 from the femto, and catpured the msgs from the femto, and you can know the ping package goes through the IPsec tunnel.</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"><img src="cid:BCAFE3004A49934D8DBE217934E2F6FD@alcatel.local"><font face="宋体"> </font></span></font></div>
<div><font size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">(2) The femto sends out the INIT msgs to the core network, but it doesn't go througth the IPsec tunnel, we expected it to be an ESP msg, and goes to the VPN server</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> firstly, and then decoded by the VPN server, and forwarded to the core network.</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"><img src="cid:48E1EAC366168E44BD1FBBC40360F10B@alcatel.local"><font face="宋体"> </font></span></font></div>
<div><font size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">I guess the root cause is that: Though the IPsec tunnel function had been activated by strongswan, but the SCTP msgs call the origin APIs of the network layer,</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">so it can't be processed by strongswan related component, but I don't know the mechanism of strongswan, what had been done on the network layer by strongswan?</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Could you please give me any clue how to debug the issue? How to let the INIT msgs go through the IPsec tunnel?</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font size="2"><span style="font-size:10pt;">Best regards</span></font></div>
<div><font size="2"><span style="font-size:10pt;">Jingen, Liu</span></font></div>
<div><font size="2"><span style="font-size:10pt;">------------</span></font></div>
<div><font size="2"><span style="font-size:10pt;">Alcatel-Lucent Shanghai Bell Co.,Ltd. WSPD NanJing R&D Center.</span></font></div>
<div><font size="2"><span style="font-size:10pt;">Floor 10, Changjiang Technological Park, No.40, Nanchang Road, GuLou District<font face="Arial">.</font></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div><font size="2"><span style="font-size:10pt;"> </span></font></div>
</span></font>
</body>
</html>