<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On Wednesday 28 March 2012 11:51 PM, <a class="moz-txt-link-abbreviated" href="mailto:Eric_C_Johnson@Dell.com">Eric_C_Johnson@Dell.com</a> wrote:
<blockquote
cite="mid:7C49960613920A4A90FD8B7EF415DC516495798B@AUSX7MCPC106.AMER.DELL.COM"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hi.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have a situation where ESP packets appear
to be getting mangled on the remote peer whenever I use
SHA2-256-128 for Phase2 (ESP). I can establish the SAs from
the Strongswan to the remote peer no problem. However, I get
no packets returned after establishing the tunnel. The
problem I am seeing is specific to this algorithm as I can get
SHA1 working without any issue. I can also get SHA2_256_128
to work for P1 negotiations as well.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">What I am trying to find out is if there is
any additional logging that I can enable on the Strongswan
host </p>
</div>
</blockquote>
<br>
Did you have a chance to check:<br>
<br>
<a class="moz-txt-link-freetext" href="http://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration">http://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration</a><br>
<br>
Regards,<br>
Gowri Shankar<br>
<br>
<blockquote
cite="mid:7C49960613920A4A90FD8B7EF415DC516495798B@AUSX7MCPC106.AMER.DELL.COM"
type="cite">
<div class="WordSection1">
<p class="MsoNormal">that could shed some light as to what is
being mangled. I am reversing the test to initiate from the
remote peer thinking the logging on Strongswan can help me
understand what is wrong with the ESP packets being sent.
I’ve confirmed via traces that the peer sends the ESP packet
to the Strongswan host but the logging doesn’t show any
indication that it received the packet. All I see are the
regular DPD log entries. When I decrypt the trace using
wireshark the packets are not being interpreted correctly.
They should be IPv6 packets with an attempt to establish an
ftp session. But wireshark interpret them as IPv4 packets
(???) with a bogus IP length.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can anybody help?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></pre>
</blockquote>
<br>
</body>
</html>