<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi there,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am trying to establish an IPv6 remote access with PSK between the road warrior Carol (at 2002:c023:9c17:21c:21b:78ff:fee0:dbfc/64) and the gateway Moon (at 2002:c023:9c17:21c::a29:4947/64). It appears that the they
<span style="color:red">failed to establish the CHILD_SA </span>due to <span style="color:red">
traffic selectors fec1::/64 === ::/0 inacceptable</span>. Carol’s eth0 gets the assigned IPv6 address from Moon, but ping6 cannot ping each other from either end. I have included the configurations and logs below (with some red highlight).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Could someone please let me know what I am missing here? <o:p>
</o:p></p>
<p class="MsoNormal">Also, could you please let me know why the assigned IPv6 address on Carol is having the full 128-bit fec1::1/<span style="color:red">128</span> instead of the configured fec1::1/<span style="color:red">64</span>?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks a lot!<o:p></o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Zhiheng<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">==================== Moon’s ipsec.conf ====================<o:p></o:p></p>
<p class="MsoNormal">config setup<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">conn %default<o:p></o:p></p>
<p class="MsoNormal"> ikelifetime=60m<o:p></o:p></p>
<p class="MsoNormal"> keylife=20m<o:p></o:p></p>
<p class="MsoNormal"> rekeymargin=3m<o:p></o:p></p>
<p class="MsoNormal"> keyingtries=1<o:p></o:p></p>
<p class="MsoNormal"> keyexchange=ikev2<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">conn rw-carol<o:p></o:p></p>
<p class="MsoNormal"> left=2002:c023:9c17:21c::a29:4947<o:p></o:p></p>
<p class="MsoNormal"> leftsubnet=2002:c023:9c17:21c::/64<o:p></o:p></p>
<p class="MsoNormal"> leftid=moon@strongswan.org<o:p></o:p></p>
<p class="MsoNormal"> leftauth=psk<o:p></o:p></p>
<p class="MsoNormal"> leftfirewall=yes<o:p></o:p></p>
<p class="MsoNormal"> right=%any<o:p></o:p></p>
<p class="MsoNormal"> rightid=*@strongswan.org<o:p></o:p></p>
<p class="MsoNormal"> rightauth=psk<o:p></o:p></p>
<p class="MsoNormal"> rightsourceip=fec1::1/64<o:p></o:p></p>
<p class="MsoNormal"> auto=add<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">================== Carol’s ipsec.conf =====================<o:p></o:p></p>
<p class="MsoNormal">config setup<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">conn %default<o:p></o:p></p>
<p class="MsoNormal"> ikelifetime=60m<o:p></o:p></p>
<p class="MsoNormal"> keylife=20m<o:p></o:p></p>
<p class="MsoNormal"> rekeymargin=3m<o:p></o:p></p>
<p class="MsoNormal"> keyingtries=1<o:p></o:p></p>
<p class="MsoNormal"> keyexchange=ikev2<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">conn home<o:p></o:p></p>
<p class="MsoNormal"> left=2002:c023:9c17:21c:21b:78ff:fee0:dbfc<o:p></o:p></p>
<p class="MsoNormal"> leftid=carol@strongswan.org<o:p></o:p></p>
<p class="MsoNormal"> leftauth=psk<o:p></o:p></p>
<p class="MsoNormal"> leftfirewall=yes<o:p></o:p></p>
<p class="MsoNormal"> leftsourceip=%config<o:p></o:p></p>
<p class="MsoNormal"> right=2002:c023:9c17:21c::a29:4947<o:p></o:p></p>
<p class="MsoNormal"> rightid=moon@strongswan.org<o:p></o:p></p>
<p class="MsoNormal"> rightsubnet=fec1::/64<o:p></o:p></p>
<p class="MsoNormal"> rightauth=psk<o:p></o:p></p>
<p class="MsoNormal"> auto=start<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">================Moon’s dev interfaces after setup==============<o:p></o:p></p>
<p class="MsoNormal">[zmao@sit-iwf sbin]$ /sbin/ip addr<o:p></o:p></p>
<p class="MsoNormal">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue <o:p></o:p></p>
<p class="MsoNormal"> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<o:p></o:p></p>
<p class="MsoNormal"> inet 127.0.0.1/8 scope host lo<o:p></o:p></p>
<p class="MsoNormal"> inet6 ::1/128 scope host <o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000<o:p></o:p></p>
<p class="MsoNormal"> link/ether 00:1b:78:75:3b:d8 brd ff:ff:ff:ff:ff:ff<o:p></o:p></p>
<p class="MsoNormal"> inet 10.41.73.71/23 brd 10.41.73.255 scope global eth0<o:p></o:p></p>
<p class="MsoNormal"> inet 10.41.73.79/24 brd 10.41.73.255 scope global eth0:1<o:p></o:p></p>
<p class="MsoNormal"> inet6 <span style="color:red">2002:c023:9c17:21c::a29:4947</span>/64 scope global
<o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal"> inet6 fe80::21b:78ff:fe75:3bd8/64 scope link <o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal">3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000<o:p></o:p></p>
<p class="MsoNormal"> link/ether 00:1b:78:75:3b:c4 brd ff:ff:ff:ff:ff:ff<o:p></o:p></p>
<p class="MsoNormal">4: sit0: <NOARP> mtu 1480 qdisc noop <o:p></o:p></p>
<p class="MsoNormal"> link/sit 0.0.0.0 brd 0.0.0.0<o:p></o:p></p>
<p class="MsoNormal">31: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 2000<o:p></o:p></p>
<p class="MsoNormal"> link/[65534] <o:p></o:p></p>
<p class="MsoNormal"> inet 10.9.8.7/24 brd 10.9.8.255 scope global tun0<o:p></o:p></p>
<p class="MsoNormal"> inet6 <span style="color:red">fec1::7/64 </span>scope site
<o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal">================Carol’s dev interfaces after setup==============<o:p></o:p></p>
<p class="MsoNormal"><etc>% ip addr <o:p></o:p></p>
<p class="MsoNormal">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
<o:p></o:p></p>
<p class="MsoNormal"> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<o:p></o:p></p>
<p class="MsoNormal"> inet 127.0.0.1/8 scope host lo<o:p></o:p></p>
<p class="MsoNormal"> inet6 ::1/128 scope host <o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000<o:p></o:p></p>
<p class="MsoNormal"> link/ether 00:1b:78:e0:db:fc brd ff:ff:ff:ff:ff:ff<o:p></o:p></p>
<p class="MsoNormal"> inet 10.41.73.234/23 brd 10.41.73.255 scope global eth0<o:p></o:p></p>
<p class="MsoNormal"> inet6 <span style="color:red">2002:c023:9c17:21c:21b:78ff:fee0:dbfc/64
</span>scope global dynamic <o:p></o:p></p>
<p class="MsoNormal"> valid_lft 2591942sec preferred_lft 604742sec<o:p></o:p></p>
<p class="MsoNormal"> inet6 <span style="color:red">fec1::1/128 </span>scope site
<o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal"> inet6 fe80::21b:78ff:fee0:dbfc/64 scope link <o:p></o:p></p>
<p class="MsoNormal"> valid_lft forever preferred_lft forever<o:p></o:p></p>
<p class="MsoNormal">3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000<o:p></o:p></p>
<p class="MsoNormal"> link/ether 00:1b:78:e0:db:ec brd ff:ff:ff:ff:ff:ff<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">================Moon’s syslog ==============<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:17 sit-iwf charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.0.0, Linux 2.6.18-238.el5, x86_64)<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:17 sit-iwf charon: 00[KNL] listening on interfaces:<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:17 sit-iwf automount[3619]: 1 remaining in /-<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] eth0<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] 10.41.73.71<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] 10.41.73.79<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] 2002:c023:9c17:21c::a29:4947<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] fe80::21b:78ff:fe75:3bd8<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] tun0<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] 10.9.8.7<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[KNL] fec1::7<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:18 sit-iwf charon: 00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:19 sit-iwf automount[3619]: 1 remaining in /-<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:19 sit-iwf charon: 00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:19 sit-iwf charon: 00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 00[CFG] loaded IKE secret for carol@strongswan.org<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 00[CFG] loaded IKE secret for moon@strongswan.org<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 00[DMN] loaded plugins: charon aes des sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default stroke
updown eap-aka eap-md5 eap-radius xauth-generic<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 00[JOB] spawning 16 worker threads<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf automount[3619]: 4 remaining in /usr2<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:20 sit-iwf charon: 08[CFG] received stroke: add connection 'rw-carol'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:21 sit-iwf charon: 08[CFG] added configuration 'rw-carol'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:21 sit-iwf charon: 08[CFG] adding virtual IP address pool 'rw-carol': fec1::1/64<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:30 sit-iwf automount[3619]: 1 remaining in /-<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:32 sit-iwf automount[3619]: 1 remaining in /-<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:37 sit-iwf automount[3619]: 4 remaining in /usr2<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:47 sit-iwf automount[3619]: 1 remaining in /-<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 10[NET] received packet: from 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[500] to 2002:c023:9c17:21c::a29:4947[500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 10[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 10[IKE] 2002:c023:9c17:21c:21b:78ff:fee0:dbfc is initiating an IKE_SA<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 10[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 10[NET] sending packet: from 2002:c023:9c17:21c::a29:4947[500] to 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[NET] received packet: from 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[4500] to 2002:c023:9c17:21c::a29:4947[4500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH CP(ADDR6 DNS6) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[CFG] looking for peer configs matching 2002:c023:9c17:21c::a29:4947[moon@strongswan.org]...2002:c023:9c17:21c:21b:78ff:fee0:dbfc[carol@strongswan.org]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[CFG] selected peer config 'rw-carol'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[IKE] authentication of 'carol@strongswan.org' with pre-shared key successful<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[IKE] peer supports MOBIKE<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[IKE] authentication of 'moon@strongswan.org' (myself) with pre-shared key
<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 sit-iwf charon: 11[IKE] IKE_SA rw-carol[1] established between 2002:c023:9c17:21c::a29:4947[moon@strongswan.org]...2002:c023:9c17:21c:21b:78ff:fee0:dbfc[carol@strongswan.org]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[IKE] scheduling reauthentication in 3325s<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[IKE] maximum IKE_SA lifetime 3505s<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[IKE] peer requested virtual IP %any6<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[CFG] assigning new lease to 'carol@strongswan.org'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[IKE] assigning virtual IP fec1::1 to peer 'carol@strongswan.org'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[IKE] <span style="color:red">
traffic selectors fec1::/64 === ::/0 inacceptable</span><o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[IKE] <span style="color:red">
failed to establish CHILD_SA, keeping IKE_SA<o:p></o:p></span></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[ENC] generating IKE_AUTH response 1 [ IDr AUTH CP(ADDR6) N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_6_ADDR) N(TS_UNACCEPT) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 sit-iwf charon: 11[NET] sending packet: from 2002:c023:9c17:21c::a29:4947[4500] to 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[4500]<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">================Carol’s syslog ==============<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.0.0, Linux 2.6.26.3-29.fc9.x86_64, x86_64)<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[KNL] listening on interfaces:<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[KNL] eth0<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[KNL] 10.41.73.234<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[KNL] 2002:c023:9c17:21c:21b:78ff:fee0:dbfc<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[KNL] fe80::21b:78ff:fee0:dbfc<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loaded 0 RADIUS server configurations<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loaded IKE secret for carol@strongswan.org<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[CFG] loaded IKE secret for moon@strongswan.org<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[DMN] loaded plugins: charon aes des sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default stroke
updown eap-identity eap-aka eap-md5 eap-radius xauth-generic<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 00[JOB] spawning 16 worker threads<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 07[CFG] received stroke: add connection 'home'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 07[CFG] added configuration 'home'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 10[CFG] received stroke: initiate 'home'<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 10[IKE] initiating IKE_SA home[1] to 2002:c023:9c17:21c::a29:4947<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 10[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 10[NET] sending packet: from 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[500] to 2002:c023:9c17:21c::a29:4947[500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 11[NET] received packet: from 2002:c023:9c17:21c::a29:4947[500] to 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 11[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 11[IKE] authentication of 'carol@strongswan.org' (myself) with pre-shared key<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 11[IKE] establishing CHILD_SA home<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 11[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH CP(ADDR6 DNS6) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:58 localhost charon: 11[NET] sending packet: from 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[4500] to 2002:c023:9c17:21c::a29:4947[4500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[NET] received packet: from 2002:c023:9c17:21c::a29:4947[4500] to 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[4500]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[ENC] parsed IKE_AUTH response 1 [ IDr AUTH CP(ADDR6) N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_6_ADDR) N(TS_UNACCEPT) ]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[IKE] authentication of 'moon@strongswan.org' with pre-shared key successful<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[IKE] IKE_SA home[1] established between 2002:c023:9c17:21c:21b:78ff:fee0:dbfc[carol@strongswan.org]...2002:c023:9c17:21c::a29:4947[moon@strongswan.org]<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[IKE] scheduling reauthentication in 3328s<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[IKE] maximum IKE_SA lifetime 3508s<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:57:59 localhost charon: 12[IKE] installing new virtual IP fec1::1<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:58:01 localhost charon: 12[IKE] <span style="color:red">
received TS_UNACCEPTABLE notify, no CHILD_SA built</span><o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:58:01 localhost charon: 12[IKE] <span style="color:red">
failed to establish CHILD_SA, keeping IKE_SA</span><o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:58:01 localhost charon: 12[IKE] received AUTH_LIFETIME of 3324s, scheduling reauthentication in 3144s<o:p></o:p></p>
<p class="MsoNormal">Aug 2 21:58:01 localhost charon: 12[IKE] peer supports MOBIKE<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>