<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7655.1">
<TITLE>RE: [strongSwan] newbie qs. suite B with AES-GCM</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>~$ sudo ipsec statusall<BR>
Status of IKEv2 charon daemon (strongSwan 4.5.2):<BR>
uptime: 8 minutes, since Jan 05 17:57:18 2012<BR>
malloc: sbrk 135168, mmap 0, used 100184, free 34984<BR>
worker threads: 9 idle of 16, job queue load: 0, scheduled events: 1<BR>
loaded plugins: curl aes des sha1 sha2 md5 pem pkcs1 gmp random x509 revocation hmac xcbc gcm stroke kernel-netlink updown openssl<BR>
Listening IP addresses:<BR>
192.168.1.105<BR>
Connections:<BR>
home: 192.168.1.105...192.168.1.100<BR>
home: local: [carol@strongswan.org] uses public key authentication<BR>
home: remote: [moon.strongswan.org] uses any authentication<BR>
home: crl: status must be GOOD<BR>
home: child: dynamic === 10.1.0.0/16<BR>
Security Associations:<BR>
home[2]: CONNECTING, 192.168.1.105[%any]...192.168.1.100[%any]<BR>
home[2]: IKE SPIs: 70cc98e6564644d1_i* 0000000000000000_r<BR>
home[2]: Tasks active: IKE_VENDOR IKE_INIT IKE_NATD IKE_CERT_PRE IKE_AUTHENTICATE IKE_CERT_POST IKE_CONFIG CHILD_CREATE IKE_AUTH_LIFETIME IKE_MOBIKE<BR>
<BR>
<BR>
-----Original Message-----<BR>
From: users-bounces+anil.philip=motorolasolutions.com@lists.strongswan.org on behalf of Philip Anil-QBW348<BR>
Sent: Thu 1/5/2012 5:59 PM<BR>
To: Andreas Steffen<BR>
Cc: users@lists.strongswan.org<BR>
Subject: Re: [strongSwan] newbie qs. suite B with AES-GCM<BR>
<BR>
Andreas,<BR>
I corrected it and tried again. It has trouble sending so I interrupted and tried ping which is able to see a path.<BR>
Anil<BR>
<BR>
~$ sudo /etc/init.d/iptables start 2> /dev/null<BR>
~$ sudo ipsec restart<BR>
Stopping strongSwan IPsec...<BR>
Starting strongSwan 4.5.2 IPsec [starter]...<BR>
!! Your strongswan.conf contains manual plugin load options for<BR>
!! pluto and/or charon. This is recommended for experts only, see<BR>
!! <A HREF="http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad">http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad</A><BR>
~$ sudo ipsec up home<BR>
initiating IKE_SA home[1] to 192.168.1.100<BR>
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<BR>
sending packet: from 192.168.1.105[500] to 192.168.1.100[500]<BR>
retransmit 1 of request with message ID 0<BR>
sending packet: from 192.168.1.105[500] to 192.168.1.100[500]<BR>
retransmit 2 of request with message ID 0<BR>
sending packet: from 192.168.1.105[500] to 192.168.1.100[500]<BR>
retransmit 3 of request with message ID 0<BR>
sending packet: from 192.168.1.105[500] to 192.168.1.100[500]<BR>
retransmit 4 of request with message ID 0<BR>
sending packet: from 192.168.1.105[500] to 192.168.1.100[500]<BR>
<BR>
~$ ping 192.168.1.100<BR>
PING 192.168.1.100 (192.168.1.100) 56(84) bytes of data.<BR>
64 bytes from 192.168.1.100: icmp_req=1 ttl=64 time=7.70 ms<BR>
64 bytes from 192.168.1.100: icmp_req=2 ttl=64 time=2.41 ms<BR>
64 bytes from 192.168.1.100: icmp_req=3 ttl=64 time=2.41 ms<BR>
^C<BR>
--- 192.168.1.100 ping statistics ---<BR>
3 packets transmitted, 3 received, 0% packet loss, time 2003ms<BR>
rtt min/avg/max/mdev = 2.412/4.177/7.704/2.494 ms<BR>
~$<BR>
<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>