<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:12pt;color:#000000;"><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><font class="Apple-style-span" face="arial, helvetica, sans-serif" size="4"><span class="Apple-style-span" style="font-size: 12pt;">I can't for some reason get StrongSwan to accept an IKE initiated connection from the other end. In ipsec.conf I've tried "auto=add" and "auto=route" but I can only get the ipsec connection going from the StrongSwan end via the command "ipsec up testipsec".</span></font><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; ">tcpdump on the far end shows that messages are going out, but the charon.log shows
nothing. When I issue the command "ipsec up testipsec", I see isakmp 1.0 and isakmp 2.0 logs on the far end and the charon.log show alot of messages and the ipsec connection functions as expected.</div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; ">Only outgoing ike/ipsec initiated connections works, not incoming. Any ideas?</div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; ">Thanks in advance for any comments or suggestions.</div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; ">Bill</div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div
style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">[root@KAP8 etc]# cat ipsec.conf</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"># ipsec.conf - strongSwan IPsec configuration file</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"># basic configuration</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">config setup</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif">
</font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># plutodebug=all</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># crlcheckinterval=600</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># strictcrlpolicy=yes</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># cachecrls=yes</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif">
</font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># nat_traversal=yes</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># charonstart=no</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">plutostart=no</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"># Add connections here.</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">conn
%default</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">ikelifetime=60m</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">keylife=20m</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">rekeymargin=3m</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">keyingtries=1</font></div><div><span
class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">mobike=no</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">authby=secret</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">keyexchange=ikev2</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">#ike=aes128-sha1-modp2048,3des-sha1-modp1536</font></div><div><span
class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># gcm256</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">#esp=aes256gcm16-modp1024-modp2048!</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># gcm128</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"> #esp=aes128gcm16-modp1024-modp2048!</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica,
sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># gmac128</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">#ike=aes128-sha256-modp2048!</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">#iesp=aes128gmac-modp2048!</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif"># gmac256</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif">
</font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">ike=aes256-sha384-modp2048!</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">esp=aes256gmac-modp2048!</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">conn testipsec</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">type=transport </font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span"
face="arial, helvetica, sans-serif">left=10.168.80.8</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">leftprotoport=tcp/%any</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">#leftid=kap</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">right=10.168.65.1</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial,
helvetica, sans-serif">rightprotoport=tcp/%any</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">#rightid=cep</font></div><div><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span><font class="Apple-style-span" face="arial, helvetica, sans-serif">auto=add</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">[root@KAP8 etc]# </font></div></div><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div></div><br>
</body></html>