<div dir="ltr"><div><div>Hi Martin,<br><br></div>Thanks for your quick response.<br><br></div>But then why its not showing SA as ESTABLISHED while its indeed ESTABLISHED and working fine for IKEv1:<br><br>M1 (Octean):<br>IKEv1<br>
Ipsec version:<br> Linux strongSwan U4.5.3/K2.6.32.60-1-lfs130202-<div>ci1-fct<br><br></div><div>Output:<br><br>root@172:~ >ipsec status<br>000 "conn1": <a href="http://10.10.10.0/24===10.10.10.8%5BCN=RY110409750.nokiasiemensnetworks.com" target="_blank">10.10.10.0/24===10.10.10.8[CN=RY110409750.nokiasiemensnetworks.com</a>, O=Nokia Siemens Networks]...10.10.10.9[10.10.10.9]===<a href="http://10.10.10.0/24" target="_blank">10.10.10.0/24</a>; erouted; eroute owner: #2<br>
000 "conn1": newest ISAKMP SA: #1; newest IPsec SA: #2;<br>000<br>000 #2: "conn1" STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 12280s; newest IPSEC; eroute owner<br>000 #2: "conn1" <a href="mailto:esp.ca76e203@10.10.10.9" target="_blank">esp.ca76e203@10.10.10.9</a> (168 bytes, 11s ago) <a href="mailto:esp.c01555e3@10.10.10.8" target="_blank">esp.c01555e3@10.10.10.8</a> (168 bytes, 11s ago); tunnel<br>
000 #1: "conn1" STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 10778s; newest ISAKMP<br>000<br><b>Security Associations (0 up, 0 connecting):</b><br></div> none<br><div><div class="gmail_extra"><br>
<br></div><div class="gmail_extra">is this a known issue and pluto daemon do not support this?<br><br><br><br><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 24, 2013 at 4:24 PM, Martin Willi <span dir="ltr"><<a href="mailto:martin@strongswan.org" target="_blank">martin@strongswan.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi,<br>
<br>
> Linux strongSwan U4.5.3/K2.6.32.60-1-lfs130202-ci1-fct<br>
> Linux strongSwan U5.0.2/K2.6.18-128.el5<br>
<div class="im"><br>
> Why is there such a difference between two outputs?<br>
<br>
</div>strongSwan 5.x introduces a completely new implementation of the IKEv1<br>
protocol in the charon daemon (that previously handled IKEv2 only).<br>
<br>
4.x used a different implementation of IKEv1, the pluto daemon.<br>
<br>
Regards<br>
<span class=""><font color="#888888">Martin<br>
<br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br>Anuj Aggarwal <br><br> .''`. <br>: :Ⓐ : # apt-get install hakuna-matata<br>`. `'` <br> `-
</div></div></div>