<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:10pt"><div style="RIGHT: auto"><SPAN style="RIGHT: auto"><BR class=yui-cursor></SPAN></div>
<div style="RIGHT: auto">I<VAR id=yui-ie-cursor></VAR> have installed strongSwan 4.5.2 on Mandriv linux 2011 and we connected to Juniper VPN server. When my <SPAN style="COLOR: black">/etc/ipsec.secrets is </SPAN><SPAN style="COLOR: red">RSA <USERACCOUNT>Key.pem "<password>"</SPAN><SPAN style="COLOR: black"> everything is OK and VPN connection established, but when I changed </SPAN><SPAN style="COLOR: black">the </SPAN><SPAN style="COLOR: red">RSA <USERACCOUNT>Key.pem "<password>"</SPAN><SPAN style="COLOR: black"> to </SPAN><SPAN style="COLOR: red">RSA <USERACCOUNT>Key.pem %prompt </SPAN><SPAN style="COLOR: black">in /etc/ipsec.secrets and I started IPSEC by ipsec start command then my connection is not established and my log file is as below:</SPAN></div>
<DIV style="FONT-FAMILY: arial, helvetica, sans-serif; FONT-SIZE: 10pt">
<DIV style="FONT-FAMILY: times new roman, new york, times, serif; FONT-SIZE: 12pt">
<DIV id=yiv1968036689>
<DIV>
<DIV style="BACKGROUND-COLOR: #fff; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: #000; FONT-SIZE: 10pt">
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: black; FONT-SIZE: 13px"><BR><SPAN style="COLOR: black"></SPAN></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: black; FONT-SIZE: 13px">
<STYLE type=text/css>
<!--
_filtered #yiv1968036689 {margin:0.79in;}
#yiv1968036689 P {margin-bottom:0.08in;}
#yiv1968036689 A:link {}
-->
</STYLE>
<DIV style="MARGIN-BOTTOM: 0in"><FONT color=#000000><FONT face="Arial, sans-serif"><FONT size=2>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[DMN] Starting IKEv2 charon daemon (strongSwan 4.5.2)<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[KNL] listening on interfaces:<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[KNL] eth0<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[KNL] 192.168.1.183<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[KNL] fe80::221:70ff:fea7:55ea<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loaded ca certificate "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5" from '/etc/ipsec.d/cacerts/VeriRootCA.pem'<BR>Nov
6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loaded ca certificate "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at <A href="https://www.verisign.com/rpa" rel=nofollow target=_blank>https://www.verisign.com/rpa</A> (c)10, CN=VeriSign Class 3 International Server CA - G3" from '/etc/ipsec.d/cacerts/VeriIssueCA.pem'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[DMN] loaded plugins: ldap aes des sha1
sha2 md5 random x509 revocation constraints pubkey pkcs1 pgp pem fips-prf gmp xcbc hmac attr kernel-netlink resolve socket-raw stroke updown <BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 00[JOB] spawning 16 worker threads<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 03[CFG] crl caching to /etc/ipsec.d/crls enabled<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 07[CFG] received stroke: add connection 'thrghazas'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 07[CFG] left nor right host is our side, assuming left=local<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 07[CFG] loaded certificate "DC=com, DC=XXX, DC=CORP, OU=MandrivaUser, OU=YYYY, CN=thrghazas" from 'thrghazasCert.pem'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 07[CFG] added configuration 'thrghazas'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 10[CFG] received stroke: initiate 'thrghazas'<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 10[IKE] initiating IKE_SA
thrghazas[1] to A.B.C.D<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 10[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 10[NET] sending packet: from 192.168.1.183[500] to A.B.C.D[500]<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[NET] received packet: from A.B.C.D[500] to 192.168.1.183[500]<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[ENC] parsed IKE_SA_INIT response 0 [ SA KE No CERTREQ N(NATD_S_IP) N(NATD_D_IP) ]<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[IKE] local host is behind NAT, sending keep alives<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[IKE] remote host is behind NAT<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[IKE] received 2 cert requests for an unknown ca<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[IKE] sending cert request for "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at <A
href="https://www.verisign.com/rpa" rel=nofollow target=_blank>https://www.verisign.com/rpa</A> (c)10, CN=VeriSign Class 3 International Server CA - G3"<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[IKE] sending cert request for "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5"<BR>Nov 6 17:32:32 wthr-lm9-p0106 charon: 13[IKE] no private key found for 'DC=com, DC=XXX, DC=CORP, OU=MandrivaUser, OU=Iran, CN=thrghazas'<BR></FONT></FONT></FONT><BR></DIV></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 13px">And <SPAN style="COLOR: black">after that I run ipsec serets and I got the following prompt:</SPAN></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: black; FONT-SIZE: 13px"><SPAN style="COLOR: black">wthr-lm9-p0106 charon: 05[CFG] rereading secrets<BR>wthr-lm9-p0106 charon: 05[CFG] loading secrets from '/etc/ipsec.secrets'<BR>wthr-lm9-p0106 charon: 05[CFG] loaded RSA private key from '/etc/ipsec.d/private/thrghazasKey.pem'</SPAN></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: rgb(0,0,0); FONT-SIZE: 13px"><SPAN style="COLOR: black">and the following line will be added to log file:</SPAN></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: arial, helvetica, sans-serif; COLOR: black; FONT-SIZE: 13px">
<STYLE type=text/css>
<!--
_filtered #yiv1968036689 {margin:0.79in;}
#yiv1968036689 P {margin-bottom:0.08in;}
#yiv1968036689 A:link {}
-->
</STYLE>
<DIV style="MARGIN-BOTTOM: 0in"><FONT color=#000000><FONT face="Arial, sans-serif"><FONT size=2></FONT></FONT></FONT>
<STYLE type=text/css>
<!--
_filtered #yiv1968036689 {margin:0.79in;}
#yiv1968036689 P {margin-bottom:0.08in;}
-->
</STYLE>
<DIV style="MARGIN-BOTTOM: 0in"><FONT color=#000000><FONT face="Arial, sans-serif"><FONT size=2>Nov 6 17:32:37 wthr-lm9-p0106 charon: 11[CFG] rereading secrets<BR>Nov 6 17:32:37 wthr-lm9-p0106 charon: 11[CFG] loading secrets from '/etc/ipsec.secrets'<BR>Nov 6 17:32:52 wthr-lm9-p0106 charon: 11[CFG] loaded RSA private key from '/etc/ipsec.d/private/thrghazasKey.pem'</FONT></FONT></FONT></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: Arial, sans-serif; MARGIN-BOTTOM: 0in; COLOR: rgb(0,0,0); FONT-SIZE: 13px"><BR></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: Arial, sans-serif; MARGIN-BOTTOM: 0in; COLOR: rgb(0,0,0); FONT-SIZE: 13px"><FONT color=#000000><FONT face="Arial, sans-serif"><FONT size=2>and nothing else in log file. (no error but no VPN connection)</FONT></FONT></FONT></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: Arial, sans-serif; MARGIN-BOTTOM: 0in; COLOR: rgb(0,0,0); FONT-SIZE: 13px"><BR></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: Arial, sans-serif; MARGIN-BOTTOM: 0in; COLOR: rgb(0,0,0); FONT-SIZE: 13px"><FONT color=#000000><FONT face="Arial, sans-serif"><FONT size=2>At that time, my log file at Junniper VPN server is as below:</FONT></FONT></FONT></DIV>
<DIV style="BACKGROUND-COLOR: transparent; FONT-STYLE: normal; FONT-FAMILY: Arial, sans-serif; MARGIN-BOTTOM: 0in; COLOR: rgb(0,0,0); FONT-SIZE: 13px">
<STYLE type=text/css>
<!--
_filtered #yiv1968036689 {margin:0.79in;}
#yiv1968036689 TD P {margin-bottom:0in;}
#yiv1968036689 P {margin-bottom:0.08in;}
--></STYLE>
<STYLE type=text/css>
<!--
_filtered #yiv1968036689 {margin:0.79in;}
#yiv1968036689 TD P {margin-bottom:0in;}
#yiv1968036689 P {margin-bottom:0.08in;}
-->
</STYLE>
<TABLE border=0 cellSpacing=0 cellPadding=0 width="100%">
<COLGROUP>
<COL>
<COL>
<COL>
<TBODY>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">NWC23465</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:39:42 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[Com2-Trusted-XXX-Linux-IKEv2] - VPN Tunneling: Session ended for user with IP 10.84.255.160</DIV></TD></TR>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">ERR24670</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:39:42 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[Com2-Trusted-XXX-Linux-IKEv2] - VPN Tunneling: ACL count = 0.</DIV></TD></TR>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">NWC23508</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:38:34 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[Com2-Trusted-XXX-Linux-IKEv2] - Key Exchange number 1 occured for user with NCIP 10.84.255.160 </DIV></TD></TR>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">NWC30477</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:38:34 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[Com2-Trusted-XXX-Linux-IKEv2] - VPN Tunneling: User with IP 10.84.255.160 connected with ESP transport mode. </DIV></TD></TR>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">NWC23464</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:38:34 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[Com2-Trusted-XXX-Linux-IKEv2] - VPN Tunneling: Session started for user with IP 10.84.255.160, hostname </DIV></TD></TR>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">ERR24670</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:38:34 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[Com2-Trusted-XXX-Linux-IKEv2] - VPN Tunneling: ACL count = 25.</DIV></TD></TR>
<TR vAlign=top>
<TD bgColor=#eeeeee width="4%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">Info</DIV></TD>
<TD bgColor=#eeeeee width="12%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">AUT24326</DIV></TD>
<TD bgColor=#eeeeee width="84%">
<DIV style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">2012-11-06 13:38:34 - ive - [188.245.200.84] Root::thrghazas(Com2-Trusted-Linux-IKEv2)[] - Primary authentication successful for thrghazas/XXX-CERT-SN from 188.245.200.84</DIV></TD></TR></TBODY></TABLE></DIV></DIV></DIV></DIV></DIV></DIV><WBR><WBR></DIV></DIV></div></body></html>