<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7655.1">
<TITLE>RE: [strongSwan] newbie qs. suite B with AES-GCM</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Andreas,<BR>
I am trying to go thru the commands in console.log<BR>
Am getting an error on carol.<BR>
Anil<BR>
<BR>
-------------moon--------------------<BR>
~$ sudo ipsec start<BR>
Starting strongSwan 4.5.2 IPsec [starter]...<BR>
!! Your strongswan.conf contains manual plugin load options for<BR>
!! pluto and/or charon. This is recommended for experts only, see<BR>
!! <A HREF="http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad">http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad</A><BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/ipv4/ah4.ko<BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/ipv4/esp4.ko<BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/xfrm/xfrm_ipcomp.ko<BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/ipv4/ipcomp.ko<BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/ipv4/tunnel4.ko<BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/ipv4/xfrm4_tunnel.ko<BR>
insmod /lib/modules/3.0.0-14-generic-pae/kernel/net/xfrm/xfrm_user.ko<BR>
~$ sudo ipsec statusall<BR>
Status of IKEv2 charon daemon (strongSwan 4.5.2):<BR>
uptime: 7 minutes, since Jan 04 12:33:26 2012<BR>
malloc: sbrk 135168, mmap 0, used 75808, free 59360<BR>
worker threads: 10 idle of 16, job queue load: 0, scheduled events: 0<BR>
loaded plugins: curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc gcm stroke kernel-netlink updown<BR>
Listening IP addresses:<BR>
192.168.1.100<BR>
Connections:<BR>
rw: 192.168.1.100...%any<BR>
rw: local: [moon.strongswan.org] uses public key authentication<BR>
rw: remote: [%any] uses any authentication<BR>
rw: crl: status must be GOOD<BR>
rw: child: 10.1.0.0/16 === dynamic<BR>
Security Associations:<BR>
none<BR>
~$<BR>
<BR>
----------roadwarrior carol--------------<BR>
~$ sudo ipsec start<BR>
Starting strongSwan 4.5.2 IPsec [starter]...<BR>
!! Your strongswan.conf contains manual plugin load options for<BR>
!! pluto and/or charon. This is recommended for experts only, see<BR>
!! <A HREF="http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad">http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad</A><BR>
charon is already running (/var/run/charon.pid exists) -- skipping charon start<BR>
starter is already running (/var/run/starter.pid exists) -- no fork done<BR>
~$ sleep 1<BR>
~$ sudo ipsec up home<BR>
initiating IKE_SA home[1] to 192.168.1.100<BR>
configured DH group MODP_NONE not supported<BR>
tried to check-in and delete nonexisting IKE_SA</FONT>
</P>
</BODY>
</HTML>