<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:8pt"><div><span>Thanks Martin for the good detail. Yes that was the problem. It works with IKvE2.</span></div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Best Regards,</div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Farid</div><div class="yahoo_quoted" style="display: block;"> <br> <br>
<div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 8pt;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Thursday, October 17, 2013 11:49 PM, Martin Willi <martin@strongswan.org> wrote:<br> </font> </div> <div class="y_msg_container">Hi Farid,<br clear="none"><br clear="none">> I have observed if I select charonstat=yes and plutostart=no ipsec<br clear="none">> is not listening in all interfaces <br clear="none"><br clear="none">With strongSwan 4.x, two IKE daemons have been in use. Pluto handled<br clear="none">IKEv1 connections, while charon was responsible to handle IKEv2<br clear="none">connections.<br clear="none"><br clear="none">Both protocols receive messages on port 500/4500, but only one process<br clear="none">can bind to
it. As a work-around, charon used a RAW socket to receive<br clear="none">packets, but did not bind to the UDP port. This allowed both daemons to<br clear="none">receive packets for their protocol.<div class="yqt3914469394" id="yqtfd27228"><br clear="none"><br clear="none">> and it never receives any connection from outside.</div><br clear="none"><br clear="none">charon ignores IKEv1 packets, but it should receive packets for IKEv2.<br clear="none">If you have IKEv1 connections, you'll need to start pluto. <br clear="none"><br clear="none"><br clear="none">With 5.x releases, things have changed; charon now handles both IKEv1<br clear="none">and IKEv2 over a standard UDP socket, pluto is not required anymore.<br clear="none"><br clear="none">Regards<br clear="none">Martin<div class="yqt3914469394" id="yqtfd06994"><br clear="none"><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>