<HTML><BODY>Good day.<br><br>i have The problem with strongswan version strongSwan U5.1.3/K3.13.10-200.fc20.i686+PAE<p>and fedora 20 Linux SeGW.Lab 3.13.10-200.fc20.i686+PAE #1 SMP Mon Apr 14 20:47:16 UTC 2014 i686 i686 i386 GNU/Linux</p><p>start is ok<br>[root@SeGW ~]# strongswan restart<br>Stopping strongSwan IPsec...<br>Starting strongSwan 5.1.3 IPsec [starter]...<br>!! Your strongswan.conf contains manual plugin load options for charon.<br>!! This is recommended for experts only, see<br>!! http://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad</p><br>tail -f /var/log/charon.log<br>[NET] waiting for data on sockets<br>.....<br><p>Apr 25 16:53:02 03[CFG] mediated_by=(null)<br>Apr 25 16:53:02 03[CFG] me_peerid=(null)<br>Apr 25 16:53:02 03[CFG] keyexchange=ikev2<br>Apr 25 16:53:02 03[CFG] adding virtual IP address pool 11.21.0.56/32<br>Apr 25 16:53:02 03[CFG] added configuration 'rw'<br>Apr 25 16:53:02 15[JOB] started worker thread 15<br>Apr 25 16:53:02 14[JOB] started worker thread 14<br>Apr 25 16:53:02 04[JOB] watcher got notification, rebuilding<br>Apr 25 16:53:02 13[LIB] created thread 13 [1457]<br>Apr 25 16:53:02 04[JOB] watching 9 for reading<br>Apr 25 16:53:02 13[JOB] started worker thread 13<br>Apr 25 16:53:02 04[JOB] watching 15 for reading<br>Apr 25 16:53:02 04[JOB] watching 16 for reading<br>Apr 25 16:53:02 04[JOB] watcher going to select()<br>and nothing more happens</p><p><br>but there is incoming init message but without any log message about it in tail -f /var/log/charon.log and w/o responce </p><p>16:39:14.817931 IP 44.44.44.13.isakmp > 44.44.44.14.isakmp: isakmp: parent_sa ik ev2_init[I]</p><p>16:39:15.821943 IP 44.44.44.13.isakmp > 44.44.44.14.isakmp: isakmp: parent_sa ik ev2_init[I]<br>16:39:17.822117 IP 44.44.44.13.isakmp > 44.44.44.14.isakmp: isakmp: parent_sa ik ev2_init[I]<br>16:39:21.826051 IP 44.44.44.13.isakmp > 44.44.44.14.isakmp: isakmp: parent_sa ik ev2_init[I]<br>16:39:27.826263 IP 44.44.44.13.isakmp > 44.44.44.14.isakmp: isakmp: parent_sa ik ev2_init[I]</p><p>iptables disabled and selinux disabled also.<br>how to check or <br><br>-- <br>Dmitriy K</p></BODY></HTML>