Hi all,<br><br>I was able to establish a connection.<br><br>I have configured connection using stroke message:<br><br>./stroke add suhas 10.0.0.2 10.0.0.1 10.0.0.2 10.0.0.1 <a href="http://2.2.2.0/24">2.2.2.0/24</a> <a href="http://1.1.1.0/24">1.1.1.0/24</a> 24 24<br>
where 10.0.0.1 and 10.0.0.2 are two linux machine ip and <a href="http://2.2.2.0/24">2.2.2.0/24</a> and <a href="http://1.1.1.0/24">1.1.1.0/24</a> are the subnets<br><br>This is the message i got after establishment:<br><br>
[root@manoranjan stroke]# ./stroke up suhas<br><br>initiating IKE_SA suhas[1] to 10.0.0.1<br>generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<br>sending packet: from 10.0.0.2[500] to 10.0.0.1[500]<br>
received packet: from 10.0.0.1[500] to 10.0.0.2[500]<br>parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]<br>authentication of '10.0.0.2' (myself) with pre-shared key<br>establishing CHILD_SA suhas<br>
generating IKE_AUTH request 1 [ IDi IDr AUTH N(USE_TRANSP) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) ]<br>sending packet: from 10.0.0.2[4500] to 10.0.0.1[4500]<br>received packet: from 10.0.0.1[4500] to 10.0.0.2[4500]<br>
parsed IKE_AUTH response 1 [ IDr AUTH SA TSi TSr N(AUTH_LFT) ]<br>authentication of '10.0.0.1' with pre-shared key successful<br>IKE_SA suhas[1] established between 10.0.0.2[10.0.0.2]...10.0.0.1[10.0.0.1]<br><br>[root@manoranjan stroke]# ./stroke status<br>
Security Associations:<br> suhas[1]: ESTABLISHED 6 seconds ago, 10.0.0.2[10.0.0.2]...10.0.0.1[10.0.0.1]<br> suhas{1}: INSTALLED, TUNNEL, ESP SPIs: cdef8e21_i c9c84ba0_o<br> suhas{1}: <a href="http://2.2.2.0/24">2.2.2.0/24</a> === <a href="http://1.1.1.0/24">1.1.1.0/24</a> <br>
<br> But when i ping from 2.2.2.2 to 1.1.1.1 packets won't get encapsulated<br> please help me.. thanks in advance<br><br>With Regards<br>Manoranjan S<br><br><div class="gmail_quote">On Thu, Apr 8, 2010 at 1:39 PM, MANORANJAN S <span dir="ltr"><<a href="mailto:manoranjan.s123@gmail.com">manoranjan.s123@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi All,<br><br>I am trying to set up SA( ikev2 ) by installing strongswan4.3.5 in two linux box.<br>
I have configured connection using stroke message:<br><br>./stroke add mano 10.0.0.1 10.0.0.2 10.0.0.2 10.0.0.1 <a href="http://2.2.2.0/24" target="_blank">2.2.2.0/24</a> <a href="http://1.1.1.0/24" target="_blank">1.1.1.0/24</a> 1 2<br>
<br>where 10.0.0.1 and 10.0.0.2 are two linux machine ip and 2.2.2.0 and 1.1.1.0 are the subnets.<br><br>I am getting following error while SA establishment.<br><br>Please let me know is there any more stroke command to be run for successful SA.<br>
<br><br>[root@manoranjan stroke]# ./stroke up mano<br>initiating IKE_SA mano[1] to 10.0.0.1<br>generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<br>sending packet: from 10.0.0.2[500] to 10.0.0.1[500]<br>
received packet: from 10.0.0.1[500] to 10.0.0.2[500]<br>parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]<br>authentication of '10.0.0.1' (myself) with pre-shared key<br>establishing CHILD_SA mano<br>
generating IKE_AUTH request 1 [ IDi IDr AUTH N(USE_TRANSP) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) ]<br>sending packet: from 10.0.0.2[4500] to 10.0.0.1[4500]<br>received packet: from 10.0.0.1[4500] to 10.0.0.2[4500]<br>
parsed IKE_AUTH response 1 [ N(AUTH_FAILED) ]<br>received AUTHENTICATION_FAILED notify error<br>[root@manoranjan stroke]# ls<br><br><br>regards<br><font color="#888888">Manoranjan S<br>
</font></blockquote></div><br>