<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">Hello, all</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="background-color: transparent;">I was trying to setup a IPv6 tunnel with strongSwan as the client. strongSwan sent the IKE_SA_INIT to my SGW and the SGW properly responded. Wireshark capture indicated that the IKE_SA_INIT response was received on the network interface that strongSwan was listening on, however the packet (IKE_SA_INIT response) was not handed over to charon, instead the packet was responded with a "ICMPv6 Unreachable (Administratively prohibited)". Any idea that the
linux kernel can fail to distribute the packet to charon? </div><div style="background-color: transparent;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">Examing the charon logs, I found the following errors:</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">"</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">charon: 00[KNL] unable to set UDP_ENCAP: Protocol not available</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">charon: 00[NET] enabling UDP decapsulation for IPv6 on port 4500
failed</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">"</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">Do those errors have anything to do with the failure to setup IPv6 tunnels? </div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent;">I am currently running strongSwan 5.0.1. The IPv6 connection is:</div><div style="background-color: transparent;"><div style="background-color:
transparent;">conn ipv6_cert</div><div style="background-color: transparent;"> left=1080::192:160:1:100</div><div style="background-color: transparent;"> leftsourceip=%config</div><div style="background-color: transparent;"> leftcert=ss.cert</div><div style="background-color: transparent;"> leftauth=pubkey</div><div style="background-color: transparent;"> leftsubnet=1080::6:0:0/112</div><div style="background-color: transparent;"> leftfirewall=yes</div><div style="background-color: transparent;"> rightfirewall=yes</div><div style="background-color: transparent;"> right=1080::192:160:1:10</div><div style="background-color: transparent;"> rightsubnet=1080::15:15:15:0/112</div><div style="background-color: transparent;"> rightauth=pubkey</div><div style="background-color: transparent;"> auto=add</div><div
style="background-color: transparent;"> esp=aes-sha1-md5-modp1024</div><div style="background-color: transparent;"> ike=3des-aes-sha1-md5-modp1024</div><div><br></div></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">-----------------</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">Thanks for your help</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent; color: rgb(0, 0,
0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">Nan</div> </div></body></html>