<html><body><div style="color:#000; background-color:#fff; font-family:lucida console, sans-serif;font-size:12pt"><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Hi ,<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'></span><font face="Times New Roman"></font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>I changed the “/proc/sys/net/core/xfrm_acq_expires” from 165
to 1000 seconds. What I understand, if an IKEv2 negotiation fails due to a
timeout (during the IKE_AUTH exchange) after a successful IKE_SA_INIT exchange,
then after the timeout (165s by default), charon will retry a new negotiation
from the beginning. I tested with 1000 IPsec tunnels successfully for 10 times.
Always it could able to bring up the tunnels and SAD count was 2000 (both
sides) always. But keeping the xfrm_acq_expires to 1000 seconds and trying to
run with 2000 IPsec tunnels, again started getting the XFRM_MSG_EXPIRE from
kernel. <o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:30
14[MGR] check-in of IKE_SA successful.<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:37
05[KNL] received a XFRM_MSG_EXPIRE<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:37
05[KNL] creating delete job for ESP CHILD_SA with SPI c0235d92 a<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>nd reqid {806}<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:37
03[MGR] checkout IKE_SA by ID<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:37
03[JOB] CHILD_SA with reqid 806 not found for delete<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:37
05[KNL] received a XFRM_MSG_EXPIRE<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Jan<span style="mso-spacerun: yes;"> </span>1 04:36:37
05[KNL] creating delete job for ESP CHILD_SA with SPI c3e24128 a<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>nd reqid {808}<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Can anyone please clarify the followings?<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoListParagraphCxSpFirst" style="margin: 0in 0in 0pt 0.25in; text-indent: -0.25in; mso-add-space: auto; mso-list: l0 level1 lfo1;"><!--[if !supportLists]--><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Comic Sans MS"; mso-bidi-font-family: "Comic Sans MS";'><span style="mso-list: Ignore;">1)<span style='font: 7pt/normal "Times New Roman"; font-size-adjust: none; font-stretch: normal;'>
</span></span></span><!--[endif]--><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>For increased number of IPsec tunnels
(e.g., 2000, 5000, 10000…), do I need always to change (increase the timeout) the
source code (kernel_netlink_ipsec.c) and then test to figure out which suits
best to our setup?<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoListParagraphCxSpMiddle" style="margin: 0in 0in 0pt 0.25in; text-indent: -0.25in; mso-add-space: auto; mso-list: l0 level1 lfo1;"><!--[if !supportLists]--><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Comic Sans MS"; mso-bidi-font-family: "Comic Sans MS";'><span style="mso-list: Ignore;">2)<span style='font: 7pt/normal "Times New Roman"; font-size-adjust: none; font-stretch: normal;'>
</span></span></span><!--[endif]--><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Is this value is configurable? <o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoListParagraphCxSpLast" style="margin: 0in 0in 10pt 0.25in; text-indent: -0.25in; mso-add-space: auto; mso-list: l0 level1 lfo1;"><!--[if !supportLists]--><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Comic Sans MS"; mso-bidi-font-family: "Comic Sans MS";'><span style="mso-list: Ignore;">3)<span style='font: 7pt/normal "Times New Roman"; font-size-adjust: none; font-stretch: normal;'>
</span></span></span><!--[endif]--><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>I think, still 165 seconds is quite a
long time.<span style="mso-spacerun: yes;"> </span>What might be the possible
cause behind IKE_AUTH exchange taking longer than 165s? Is it processing delay
caused by thread (running at IKE responder end)?<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Here go our configurations<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><u><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 12pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial; mso-bidi-font-size: 10.0pt;'>IKE initiator <o:p></o:p></span></u></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>strongswan.conf<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>threads = 16<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>replay_window
= 32<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>dos_protection
= no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>block_threshold=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>cookie_threshold=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>init_limit_half_open=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>retransmit_timeout=60<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>retransmit_tries=30<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>install_virtual_ip=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>install_routes=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>close_ike_on_child_failure=yes<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>ikesa_table_size = 512<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>ikesa_table_segments = 16<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>reuse_ikesa =
no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>load-tester {<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>enable = yes<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>initiators = 40<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>iterations = 50<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>delay = 20<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>responder = 30.30.30.2<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>proposal = aes128-sha1-modp1024<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>initiator_auth = psk<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>responder_auth = psk<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>request_virtual_ip = no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>ike_rekey = 0<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>child_rekey = 0<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>delete_after_established = no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>shutdown_when_complete = no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>#fake_kernel = yes<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>}<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>ipsec.secrets<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>@srv.strongswan.org %any : PSK "strongSwan"<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>IKE Responder<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>strongswan.conf<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span class="tab"> <span class="tab"> </span></span>threads = 16<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>replay_window
= 32<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>block_threshold=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>cookie_threshold=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>init_limit_half_open=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>half_open_timeout=2000<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>dos_protection
= no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>install_virtual_ip=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>install_routes=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>close_ike_on_child_failure=yes<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>ikesa_table_size = 512<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>ikesa_table_segments = 16<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>reuse_ikesa =
no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>ipsec.conf<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>conn %default<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>ikelifetime=24h<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>keylife=23h<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>rekeymargin=5m<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>keyingtries=1<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>keyexchange=ikev2<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>ike=aes128-sha1-modp1024!<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>mobike=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>conn host-host<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>left=30.30.30.2<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>leftsubnet=30.30.30.2/8<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>rightid=%any<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>leftauth=psk<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>leftfirewall=yes<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>right=30.30.30.1<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>rightsubnet=30.30.30.1/8<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;">
</span>leftid=@srv.strongswan.org<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>rightauth=psk<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>type=tunnel<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>authby=secret<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>rekey=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><span style="mso-spacerun: yes;"> </span>reauth=no<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'><o:p> </o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>ipsec.secrets<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>@srv.strongswan.org %any : PSK "strongSwan"<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div><font face="Times New Roman"></font> </div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Regards,<o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div class="MsoNormal" style="margin: 0in 0in 10pt;"><span style='color: black; line-height: 115%; font-family: "Comic Sans MS"; font-size: 10pt; mso-fareast-font-family: "Times New Roman"; mso-bidi-font-family: Arial;'>Chinmaya</span></div><div><font face="Times New Roman">
</font></div></div></body></html>