<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Martin,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal">> Did you include that rw-psk.conf from your main ipsec.conf, or how<br>
should strongSwan find this configuration in a custom file?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">rw-psk.conf is included in my configuration and it see when I try and associate it choose the connection profile. See logs.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> Are both peers in this connection running strongSwan? How do your<br>
ipsec.secrets files look like on both peers?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Both peers are not using strongSwan. The client is PlayBook. My secret file is as shown.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">strongSwan2 ipsec.secrets<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">: PSK "T3st"<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr style="height:1.25in">
<td width="210" style="width:1.75in;padding:0in 0in 0in 0in;height:1.25in">
<p class="MsoNormal" style="line-height:115%"><b><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black">Regards,</span></b><b><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></b></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:115%"><b><i><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black">Adrian Milanoski</span></i></b><span style="font-size:8.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black"><br>
BBOS </span><span style="font-size:8.0pt;line-height:115%;font-family:"Calibri","sans-serif"">Lab Administrator<span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:115%"><span style="font-size:8.0pt;line-height:115%;font-family:"Calibri","sans-serif"">VPN / WLAN IOT / Pre-Cert<span style="color:black">
</span><span style="color:#0070C0">Research In Motion Limited</span><span style="color:black">
<br>
Tel. (289) 261-5801<br>
Email <a href="mailto:amilanoski@rim.com"><span style="line-height:115%;color:#9E540A">amilanoski@rim.com</span></a></span></span><span style="font-size:8.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
</td>
<td width="167" style="width:99.95pt;padding:0in 0in 0in 0in;height:1.25in">
<p class="MsoNormal" align="center" style="text-align:center;line-height:115%"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" align="center" style="text-align:center;line-height:115%"><span style="font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" align="center" style="text-align:center;line-height:115%"><a href="http://www.rim.com/"><span style="font-family:"Calibri","sans-serif";text-decoration:none"><img border="0" width="115" height="50" id="Picture_x0020_1" src="cid:image001.jpg@01CD5911.7BB889E0" alt="www.rim.com"></span></a><span style="font-size:8.0pt;line-height:115%;font-family:"Verdana","sans-serif";color:navy"><img border="0" width="102" height="39" id="Picture_x0020_2" src="cid:image002.jpg@01CD5911.7BB889E0" alt="cid:image001.png@01CB37B8.EC492D80"></span><span style="font-family:"Calibri","sans-serif";color:black"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> SaRaVanAn [mailto:saravanan.nagarajan87@gmail.com]
<br>
<b>Sent:</b> Tuesday, July 03, 2012 10:45 AM<br>
<b>To:</b> Martin Willi<br>
<b>Cc:</b> Adrian Milanoski; Users@lists.strongswan.org<br>
<b>Subject:</b> Re: [strongSwan] Unable to establish a IKEv2 PSK - MAC mismatchd<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hi Adrian,<br>
I also faced same kind of issue often.<br>
The issue might exists in identification payload coming from strongswan2 ,which differs from identification configured in Strongswan1 .<br>
Please post your ipsec.secrets file of strongswan 1 and 2.<br>
<br>
Regards,<br>
Saravanan N<o:p></o:p></p>
<div>
<p class="MsoNormal">On Mon, Jul 2, 2012 at 1:04 PM, Martin Willi <<a href="mailto:martin@strongswan.org" target="_blank">martin@strongswan.org</a>> wrote:<o:p></o:p></p>
<p class="MsoNormal">Hello Adrian,<br>
<br>
> rw-psk.conf<br>
<br>
Did you include that rw-psk.conf from your main ipsec.conf, or how<br>
should strongSwan find this configuration in a custom file?<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
> Errors I am getting all the time now and I have read that there is no<br>
> matching configuration or something along those lines.<o:p></o:p></p>
</div>
<p class="MsoNormal">Do you have some more details about this error, such as some log output?<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
> 13[IKE] tried 1 shared key for '%any' - 'vpntest', but MAC mismatched<o:p></o:p></p>
</div>
<p class="MsoNormal">Are both peers in this connection running strongSwan? How do your<br>
ipsec.secrets files look like on both peers?<br>
<br>
Regards<br>
Martin<br>
<br>
<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br>
<a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
--------------------------------------------------------------------- <br>
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
</body>
</html>