<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:8pt"><div><span>Hi Martin,</span></div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">After establishing the successful secure connection between two hosts I am using PING to validate the connectivity.</div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0);
font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">I am capturing the data using TCPDUMP. It is interesting that I can still see the ech-request in plain text</div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">I pinged from both sides but no matter what I can see echo-request in plain text.</div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Below you can see output of TCPDUMP:</div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande',
sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="background-color: transparent;">16:29:40.455844 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x26), length 132</div><div style="background-color: transparent;">16:29:40.456164 IP 192.168.1.209 > 192.168.1.55: ICMP echo request, id 19103, seq 1, length 64</div><div style="background-color: transparent;">16:29:40.456654 IP 192.168.1.55 > 192.168.1.209: ESP(spi=0xc51dee21,seq=0x26), length 132</div><div style="background-color: transparent;">16:29:41.457091 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x27), length 132</div><div style="background-color: transparent;">16:29:41.457406 IP 192.168.1.209 > 192.168.1.55: ICMP echo request, id 19103, seq 2, length 64</div><div style="background-color: transparent;">16:29:41.457844 IP 192.168.1.55 > 192.168.1.209: ESP(spi=0xc51dee21,seq=0x27), length 132</div><div style="background-color:
transparent;">16:29:42.458345 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x28), length 132</div><div style="background-color: transparent;">16:29:42.458658 IP 192.168.1.209 > 192.168.1.55: ICMP echo request, id 19103, seq 3, length 64</div><div style="background-color: transparent;">16:29:42.459092 IP 192.168.1.55 > 192.168.1.209: ESP(spi=0xc51dee21,seq=0x28), length 132</div><div style="background-color: transparent;">16:29:43.459526 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x29), length 132</div><div style="background-color: transparent;">16:29:43.459844 IP 192.168.1.209 > 192.168.1.55: ICMP echo request, id 19103, seq 4, length 64</div><div style="background-color: transparent;">16:29:43.460283 IP 192.168.1.55 > 192.168.1.209: ESP(spi=0xc51dee21,seq=0x29), length 132</div><div style="background-color: transparent;">16:29:44.460732 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x2a), length
132</div><div style="background-color: transparent;">16:29:44.461050 IP 192.168.1.209 > 192.168.1.55: ICMP echo request, id 19103, seq 5, length 64</div><div style="background-color: transparent;">16:29:44.461552 IP 192.168.1.55 > 192.168.1.209: ESP(spi=0xc51dee21,seq=0x2a), length 132</div><div style="background-color: transparent;">16:29:45.462021 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x2b), length 132</div><div style="background-color: transparent;">16:29:45.462338 IP 192.168.1.209 > 192.168.1.55: ICMP echo request, id 19103, seq 6, length 64</div><div style="background-color: transparent;">16:29:45.462773 IP 192.168.1.55 > 192.168.1.209: ESP(spi=0xc51dee21,seq=0x2b), length 132</div><div style="background-color: transparent;">16:29:46.463225 IP 192.168.1.209 > 192.168.1.55: ESP(spi=0xcaec41a1,seq=0x2c), length 132</div><div><br></div><div><br></div><div><br></div><div>Am I supposed to see one packet in plain
text? would it be any reason for it?</div><div><br></div><div>Thanks a lot for your help.</div><div><br></div><div>Farid</div><div class="yahoo_quoted" style="display: block;"> <br> <br> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 8pt;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Friday, October 18, 2013 9:08 AM, Farid Farid <farid21657@yahoo.com> wrote:<br> </font> </div> <div class="y_msg_container"><div id="yiv5501110797"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 8pt;"><div><span>Thanks Martin for the good detail. Yes that was the problem. It works with IKvE2.</span></div><div style="color: rgb(0, 0, 0);
font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span><br clear="none"></span></div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Best Regards,</div><div style="color: rgb(0, 0, 0); font-size: 11px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Farid</div><div class="yiv5501110797yqt1007151510" id="yiv5501110797yqt05937"><div class="yiv5501110797yahoo_quoted" style="display: block;"> <br clear="none"> <br clear="none">
<div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 8pt;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Thursday, October 17, 2013 11:49 PM, Martin Willi <martin@strongswan.org> wrote:<br clear="none"> </font> </div> <div class="yiv5501110797y_msg_container">Hi Farid,<br clear="none"><br clear="none">> I have observed if I select charonstat=yes and plutostart=no ipsec<br clear="none">> is not listening in all interfaces <br clear="none"><br clear="none">With strongSwan 4.x, two IKE daemons have been in use. Pluto handled<br clear="none">IKEv1 connections, while charon was responsible to handle IKEv2<br clear="none">connections.<br clear="none"><br clear="none">Both protocols receive messages on port 500/4500, but only one process<br
clear="none">can bind to
it. As a work-around, charon used a RAW socket to receive<br clear="none">packets, but did not bind to the UDP port. This allowed both daemons to<br clear="none">receive packets for their protocol.<div class="yiv5501110797yqt3914469394" id="yiv5501110797yqtfd27228"><br clear="none"><br clear="none">> and it never receives any connection from outside.</div><br clear="none"><br clear="none">charon ignores IKEv1 packets, but it should receive packets for IKEv2.<br clear="none">If you have IKEv1 connections, you'll need to start pluto. <br clear="none"><br clear="none"><br clear="none">With 5.x releases, things have changed; charon now handles both IKEv1<br clear="none">and IKEv2 over a standard UDP socket, pluto is not required anymore.<br clear="none"><br clear="none">Regards<br clear="none">Martin<div class="yiv5501110797yqt3914469394" id="yiv5501110797yqtfd06994"><br clear="none"><br clear="none"></div><br clear="none"><br clear="none"></div> </div>
</div> </div></div> </div></div></div><br><div class="yqt1007151510" id="yqt02304">_______________________________________________<br clear="none">Users mailing list<br clear="none"><a shape="rect" ymailto="mailto:Users@lists.strongswan.org" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br clear="none"><a shape="rect" href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a></div><br><br></div> </div> </div> </div> </div></body></html>