<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On Thursday 05 July 2012 09:40 PM, Shukla, Sanjay wrote:
<blockquote
cite="mid:59C25410D885F54E8772E04F75629D8706E099@STSNYEXMBX2.corp.root.ipc.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">I have a host to host configuration<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The initiator tried to create a tunnel to
the peer, however a corresponding configuration was not found.
Later on the peer updated its configuration and ipsec was
restarted on the peer.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">However for my requirement I need the
initiator to keep trying but it does not re-try if it receives
if received NO_PROPOSAL_CHOSEN notify error for that
connection.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Are there any setting I can do for this.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Initiator config.<o:p></o:p></p>
<p class="MsoNormal">conn LocalIP_VIP_10.204.74.68<o:p></o:p></p>
<p class="MsoNormal"> left=10.204.74.189<o:p></o:p></p>
<p class="MsoNormal"> leftcert=ServLcl.pem<o:p></o:p></p>
<p class="MsoNormal"> leftsendcert=yes<o:p></o:p></p>
<p class="MsoNormal"> right=10.204.74.68<o:p></o:p></p>
<p class="MsoNormal"> rightid=%any<o:p></o:p></p>
<p class="MsoNormal"> keyexchange=ikev2<o:p></o:p></p>
<p class="MsoNormal"> type=transport<o:p></o:p></p>
<p class="MsoNormal"> reauth=no</p>
</div>
</blockquote>
<br>
Not very sure what could happened in initiator side. Can you enable
verbose level 4<br>
for charon.log and see what happens after ipsec is reastarted in
peer.<br>
<br>
<a class="moz-txt-link-freetext" href="http://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration">http://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration</a><br>
<br>
<br>
<blockquote
cite="mid:59C25410D885F54E8772E04F75629D8706E099@STSNYEXMBX2.corp.root.ipc.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal"> dpddelay=5s<o:p></o:p></p>
<p class="MsoNormal"> dpdaction=restart<o:p></o:p></p>
<p class="MsoNormal"> closeaction=restart<o:p></o:p></p>
</div>
</blockquote>
Hope, ipsec is restarted with in <em>dpdtimeout </em>.<br>
<br>
Regards,<br>
Gowri Shankar<br>
<em></em>
<blockquote
cite="mid:59C25410D885F54E8772E04F75629D8706E099@STSNYEXMBX2.corp.root.ipc.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"> keyingtries=%forever<o:p></o:p></p>
<p class="MsoNormal"> auto=start<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-sanjay<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p><span style="font-family: 'Palatino Linotype','serif'; color:
green; font-size: 10pt;"><em><span style="font-family:
'Palatino Linotype','serif';"><font size="1"><img
style="width: 24px; height: 20px;" alt=""
src="cid:part1.08080602.01000101@linux.vnet.ibm.com"
height="26" width="30"><span style="font-family:
'Palatino Linotype','serif'; color: green; font-size:
10pt;"><em><span style="font-family: 'Palatino
Linotype','serif';"><font size="1">Please consider
the environment before printing this email.</font></span></em></span></font></span></em></span></p>
<br>
<p><font color="#808080" face="Arial" size="2"><font
color="#808080" face="Arial" size="2">------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------</font></font></p>
<p><font color="#808080" face="Arial" size="2"><font
color="#808080" face="Arial" size="2">DISCLAIMER: This
e-mail may contain information that is confidential,
privileged or otherwise protected from disclosure. If you
are not an intended recipient of this e-mail, do not
duplicate or redistribute it by any means. Please delete it
and any attachments and notify the sender that you have
received it in error. Unintended recipients are prohibited
from taking action on the basis of information in this
e-mail.E-mail messages may contain computer viruses or other
defects, may not be accurately replicated on other systems,
or may be intercepted, deleted or interfered with without
the knowledge of the sender or the intended recipient. If
you are not comfortable with the risks associated with
e-mail messages, you may decide not to use e-mail to
communicate with IPC. IPC reserves the right, to the extent
and under circumstances permitted by applicable law, to
retain, monitor and intercept e-mail messages to and from
its systems.</font></font><br>
</p>
<br>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></pre>
</blockquote>
<br>
</body>
</html>