<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="font-family: 'times new roman', 'new york', times, serif;"><div style="font-family: 'times new roman', 'new york', times, serif;"><div class="y_msg_container"><div id="yiv2406690373"><div><div style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif;"><div id="yiv2406690373"><div><div style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif;"><div id="yiv2406690373yui_3_7_2_38_1377568206375_40" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">Hello Everyone,</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_69" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new
york', times, serif; font-size: 12pt;"><br id="yiv2406690373yui_3_7_2_38_1377568206375_74"></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" id="yiv2406690373yui_3_7_2_38_1377568206375_71">I have two machines one Ubunto 12.0 with strongSwan 4.5.2.1 and one a Openwrt router running strongswan 5.0.4.1.</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_76" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;"><br id="yiv2406690373yui_3_7_2_38_1377568206375_81"></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_78" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;">I am configuring a simple host-host topology with secret key (
password). I ran >>ipsec start --nofork on ubuntu machine and >>ipsec up conn on Openwrt router .You can see below that I get error of No_PROPOSAL_CHOSEN.</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" class="yui_3_7_2_66_1377622557688_74">Here are all my config files:</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;"
class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" class="yui_3_7_2_66_1377622557688_74">Here is the ipsec.conf for client side (openwrt):</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">version 2
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">config setup
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> charondebug = "ike 2,knl 2" </div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;"
class="yui_3_7_2_66_1377622557688_74"><span style="background-color: transparent;"> </span></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">conn Ubuntu
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> ikelifetime=60m
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> keylife=20m </div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> rekeymargin=3m
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> keyingtries=1
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> keyexchange=ikev2 </div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88"
style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> left=192.168.1.55 </div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> right=192.168.1.209
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> authby=secret
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> auto=add </div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> leftid="@lmu55"
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> esp=3des-md5,3des-sha1
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> ike=3des-md5-modp1536,3des-sha-modp1536,3des-md5-modp1024,3des-sha-modp1024 </div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> rightid="@lmu209"
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> type=tunnel
</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">****No matter what I chose for ike and esp I get the error.I even left them out from the file but still getting error</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color:
transparent;" class="yui_3_7_2_66_1377622557688_74">Here is the ipsec.conf from server side: (Ubuntu)</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">:<span style="background-color: transparent;">config setup</span></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> <span style="background-color: transparent;"> </span></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> <span style="background-color: transparent;"> plutodebug=all</span></div><div
id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> charonstart=yes</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> plutostart=no</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">conn %default</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> keyingtries=1</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">
keyexchange=ikev2</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> left=192.18.1.209</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> leftid=@lmu209</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> authby=secret</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> mobike=no</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> pfs=no</div><div
id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"># Add connections here.</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"># Sample VPN connections</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">conn desktop</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> right=192.168.1.55</div><div
id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> rightid=@lmu55</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> type=tunnel</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> auto=add</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">here is the strongswan.conf in server side: (
Ubuntu):</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">~<span style="background-color: transparent;"># strongswan.conf - strongSwan configuration file</span></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">charon {</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div
id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # number of worker threads in charon</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> threads = 16</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # send strongswan vendor ID?</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # send_vendor_id = yes</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color:
transparent;" class="yui_3_7_2_66_1377622557688_74"> plugins {</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> sql {</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # loglevel to log into sql database</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> loglevel = 2</div><div
id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # URI to the database</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # database = sqlite:///path/to/file.db</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # database = mysql://user:password@localhost/database</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88"
style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> }</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> }</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> # ...</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">}</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88"
style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">pluto {</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"># load = sha1 sha2 md5 aes des hmac gmp random kernel-netlink</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">}</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">libstrongswan {</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;"
class="yui_3_7_2_66_1377622557688_74"> # set to no, the DH exponent size is optimized</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> dh_exponent_ansi_x9_42 = no</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">}</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">~</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74">~</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="background-color: transparent;" class="yui_3_7_2_66_1377622557688_74"> </div></div><div
id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" class="yui_3_7_2_66_1377622557688_74">And here is the output of the ipsec start:</div><div id="yiv2406690373yui_3_7_2_38_1377568206375_88" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;" class="yui_3_7_2_66_1377622557688_74"><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_99" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;"><br id="yiv2406690373yui_3_7_2_38_1377568206375_104"></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_101" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size:
16px; background-color: transparent; font-style: normal;"><span style="background-color: transparent;">@>:~/Desktop/svn/lmu5000-base$ sudo ipsec start --nofork</span><br></div><div id="yiv2406690373yui_3_7_2_38_1377568206375_64" style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; font-style: normal;">Starting strongSwan 4.5.2 IPsec [starter]...<br>00[DMN]
Starting IKEv2 charon daemon (strongSwan 4.5.2)<br>00[KNL] listening on interfaces:<br>00[KNL] eth0<br>00[KNL] 192.168.1.209<br>00[KNL] fe80::20a:f7ff:fe09:720f<br>00[KNL] eth3<br>00[KNL] 192.168.45.160<br>00[KNL] fe80::b6b5:2fff:fed9:4f88<br>00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<br>00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<br>00[CFG] loading
ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<br>00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<br>00[CFG] loading crls from '/etc/ipsec.d/crls'<br>00[CFG] loading secrets from '/etc/ipsec.secrets'<br>00[CFG] loaded IKE secret for @lmu209 @lmu55 <br>00[CFG] sql plugin: database URI not set<br>00[LIB] plugin 'sql': failed to load - sql_plugin_create returned NULL<br>00[CFG] loaded 0 RADIUS server configurations<br>00[LIB] plugin 'medsrv' failed to load: /usr/lib/ipsec/plugins/libstrongswan-medsrv.so: cannot open shared object file: No such file or directory<br>00[CFG] mediation client database URI not defined, skipped<br>00[LIB] plugin 'medcli': failed to load - medcli_plugin_create returned NULL<br>00[CFG] HA config misses local/remote address<br>00[LIB] plugin 'ha': failed to load - ha_plugin_create returned NULL<br>00[DMN] loaded plugins: test-vectors curl ldap aes des sha1 sha2 md5 random x509
revocation constraints pubkey pkcs1 pgp pem openssl fips-prf gmp agent pkcs11 xcbc hmac ctr ccm gcm attr kernel-netlink resolve socket-raw farp stroke updown eap-identity eap-aka eap-md5 eap-gtc eap-mschapv2 eap-radius eap-tls eap-ttls eap-tnc nm dhcp led addrblock <br>00[JOB] spawning 16 worker threads<br>charon (24825) started after 40 ms<br>04[CFG] received stroke: add connection 'desktop'<br>04[CFG] left nor right host is our side, assuming left=local<br>04[CFG] added configuration 'desktop'<br>12[NET] received packet: from 192.168.1.55[500] to 192.168.1.209[500]<br><span style="font-weight: bold;">12[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<br>12[IKE] no IKE config found for 192.168.1.209...192.168.1.55, sending NO_PROPOSAL_CHOSEN<br>12[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]</span><br>12[NET] sending packet: from 192.168.1.209[500] to
192.168.1.55[500]<br><br></div></div></div></div></div></div></div><div class="y_msg_container"><br></div><div class="y_msg_container"><br></div>I appreciate if someone can give me some hints here.</div><div class="y_msg_container"><br></div><div class="y_msg_container">Thanks,</div><div class="y_msg_container">Farid<br><font size="3">_______________________________________________</font><br><font size="3">Users mailing list</font><br><a ymailto="mailto:Users@lists.strongswan.org" href="mailto:Users@lists.strongswan.org" style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">Users@lists.strongswan.org</a><br><a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank" style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">https://lists.strongswan.org/mailman/listinfo/users</a><br><br></div> </div> </div> </div></body></html>