I have all configuration files in place now.<br>I tried to run sample test at <a href="http://www.strongswan.org/uml/testresults43/ikev1/rw-cert/">http://www.strongswan.org/uml/testresults43/ikev1/rw-cert/</a> <br><br>my network setup is like:<br>
<br>-------------------------------<br>| PC1(FC9) |<br>| eth0:<a href="http://10.1.0.2/24">10.1.0.2/24</a> |<br>| IPsec disabled here|<br>--------------------------------<br> ||<br> ||<br>
-------------------------------------------------<br>| PC2(Ubuntu Karmic) |<br>| eth1:<a href="http://10.1.0.1/24">10.1.0.1/24</a> |<br>| |<br>
| eth0:<a href="http://192.168.1.24/24">192.168.1.24/24</a> |<br>| |<br>| strongSwan 4.3.6 installed here |<br>--------------------------------------------------<br>
||<br> ||<br>-------------------------------------------------<br>| PC3(Ubuntu Karmic) |<br>| eth0:<a href="http://192.168.1.21/24">192.168.1.21/24</a> |<br>| |<br>
| strongSwan 4.3.6 installed here |<br>--------------------------------------------------<br clear="all"><br>I configured PC2 and PC3 as specified in <a href="http://www.strongswan.org/uml/testresults43/ikev1/rw-cert/">http://www.strongswan.org/uml/testresults43/ikev1/rw-cert/</a> .<br>
<br>From PC3(IP:192.168.1.21), I try to ping PC1(IP:10.1.0.2) but to no avail.<br><br>According to the sample test at the above URL, I should be able to send ping PC1 from PC3.<br><br>Is there something additional to be done with iptables or route entries?<br>
<br>I tried adding route entries and tcpdump on all machines...but its just not working. :(<br><br>Is there a pre-configured virtual appliance available on some website or with someone in this list?<br><br>I am really depressed with strongSwan not working though I am trying since five days.<br>
<br>Really appreciate any help.<br><br>Regards<br>Pankaj Gupta<br>
<br><br><div class="gmail_quote">2010/4/13 pankaj gupta <span dir="ltr"><<a href="mailto:beckman16@gmail.com">beckman16@gmail.com</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Thanks Aaron, I build strongswan from source..and files appeared at expected locations.<div>Thanks a ton for you response.</div><div><br clear="all">Regards<br>Pankaj Gupta<br>
<br><br><div class="gmail_quote">2010/4/12 Aaron Zhang <span dir="ltr"><<a href="mailto:azhang@sonicwall.com" target="_blank">azhang@sonicwall.com</a>></span><div><div></div><div class="h5"><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div link="blue" vlink="purple" lang="ZH-CN"><div><p class="MsoNormal"><span style="font-size: 11pt;" lang="EN-US">The config file may locate at /usr/local/etc. It depend on how you edit the configure file when you build strongswan by source code.</span></p>
<p class="MsoNormal"><span style="font-size: 11pt;" lang="EN-US"> </span></p><p class="MsoNormal"><span style="font-size: 11pt;" lang="EN-US">--Aaron</span></p><p class="MsoNormal"><span style="font-size: 11pt;" lang="EN-US"> </span></p>
<p class="MsoNormal"><b><span style="font-size: 10pt;" lang="EN-US">From:</span></b><span style="font-size: 10pt;" lang="EN-US"> users-bounces+bzhang=<a href="http://sonicwall.com" target="_blank">sonicwall.com</a>@<a href="http://lists.strongswan.org" target="_blank">lists.strongswan.org</a> [mailto:<a href="mailto:users-bounces%2Bbzhang" target="_blank">users-bounces+bzhang</a>=<a href="http://sonicwall.com" target="_blank">sonicwall.com</a>@<a href="http://lists.strongswan.org" target="_blank">lists.strongswan.org</a>] <b>On Behalf Of </b>pankaj gupta<br>
<b>Sent:</b> 2010</span><span style="font-size: 10pt; font-family: SimSun;">Äê</span><span style="font-size: 10pt;" lang="EN-US">4</span><span style="font-size: 10pt; font-family: SimSun;">ÔÂ</span><span style="font-size: 10pt;" lang="EN-US">12</span><span style="font-size: 10pt; font-family: SimSun;">ÈÕ</span><span style="font-size: 10pt;" lang="EN-US"> 17:41<br>
<b>To:</b> <a href="mailto:users@lists.strongswan.org" target="_blank">users@lists.strongswan.org</a><br><b>Subject:</b> [strongSwan] strongSwan configuration on Ubuntu(Karmic).-- No /etc/ipsec.conf , ipsec.secrets present.</span></p>
<div><div></div><div><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US">Hi Community,</span></p><div><p class="MsoNormal"><span lang="EN-US">I recently plunged into IPsec world and am overwhelmed by the richness of IPsec particularly strongSwan.</span></p>
</div><div><p class="MsoNormal"><span lang="EN-US"> </span></p></div><div><p class="MsoNormal"><span lang="EN-US">I am trying to configure strongSwan on Ubuntu(Karmic).</span></p></div><div><p class="MsoNormal"><span lang="EN-US">I installed strongSwan packages(strongSwan, its Network Manager module and few other packages starting with strongSwan) from synaptic package manager.</span></p>
</div><div><p class="MsoNormal"><span lang="EN-US">But I could not find ipsec.conf, ipsec.secrets files on the file system.</span></p></div><div><p class="MsoNormal"><span lang="EN-US"> </span></p></div><div><p class="MsoNormal">
<span lang="EN-US">I had installed strongSwan on FC9 also, but that was through source building and all configuration files were there in case of FC9.</span></p></div><div><p class="MsoNormal"><span lang="EN-US"> </span></p>
</div><div><p class="MsoNormal"><span lang="EN-US">I am confused ..do I need to create these files by myself on Ubuntu? </span></p></div><div><p class="MsoNormal"><span lang="EN-US">Or I need to build strongSwan through source(if it helps)? </span></p>
</div><div><p class="MsoNormal"><span lang="EN-US">Or there is some problem if these files are not there by default?</span></p></div><div><p class="MsoNormal"><span lang="EN-US"> </span></p></div><div><p class="MsoNormal">
<span lang="EN-US">I have invested enough time searching and configuring things of different OS, please help me if anyone have some idea.</span></p></div><div><p class="MsoNormal"><span lang="EN-US"> </span></p></div><div>
<p class="MsoNormal"><span lang="EN-US">Any help would be appreciated.</span></p></div><div><p class="MsoNormal"><span lang="EN-US"> </span></p></div><div><p class="MsoNormal"><span lang="EN-US">Regards<br>Pankaj Gupta</span></p>
</div></div></div></div></div></blockquote></div></div></div><br></div>
</blockquote></div><br>