<div dir="ltr">below is the strongswan log:<div><br></div><div><div>00[DMN] signal of type SIGINT received. Shutting down</div><div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.0.2, Linux 2.6.18-348.1.1.el5, i686)</div>
<div>Aug 19 08:41:39 PCSWAN3 charon: 00[KNL] unable to set UDP_ENCAP: Protocol not available</div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[NET] enabling UDP decapsulation for IPv6 on port 4500 failed </div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loaded 0 RADIUS server configurations</div>
<div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'</div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'</div>
<div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'</div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'</div>
<div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'</div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'</div><div>
Aug 19 08:41:39 PCSWAN3 charon: 00[LIB] opening '/usr/local/etc/ipsec.d/private/myKey.der' failed: No such file or directory </div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[LIB] building CRED_PRIVATE_KEY - RSA failed, tried 6 builders </div>
<div>Aug 19 08:41:39 PCSWAN3 charon: 00[CFG] loading private key from '/usr/local/etc/ipsec.d/private/myKey.der' failed </div><div>Aug 19 08:41:39 PCSWAN3 charon: 00[DMN] loaded plugins: charon aes des sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default stroke updown eap-md5 eap-radius xauth-generic</div>
<div>Aug 19 08:41:39 PCSWAN3 charon: 00[JOB] spawning 16 worker threads</div><div>Aug 19 08:41:43 PCSWAN3 charon: 05[CFG] received stroke: initiate 'client'</div><div>Aug 19 08:41:43 PCSWAN3 charon: 05[CFG] no config named 'client'</div>
</div></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-08-19 11:18 GMT+08:00 <span dir="ltr"><<a href="mailto:amysue.z@gmail.com" target="_blank">amysue.z@gmail.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Noel,<div><br></div><div>I have checked the strongswan logs at /var/log/messages, and I found that it load the conf directory /usr/loca/etc, while I put all my conf files at /etc, which I think cause my problem.</div>
<div>Is there any way that I can change the conf directory to /etc.</div><div><br></div><div>Thanks,</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-08-18 21:16 GMT+08:00 Noel Kuntze <span dir="ltr"><<a href="mailto:noel@familie-kuntze.de" target="_blank">noel@familie-kuntze.de</a>></span>:<div>
<div class="h5"><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
</div>Hello Amysue<br>
<br>
Please refer to [2] for a how-to for installing strongSwan.<br>
Please note that some modules that could be necessary for your setup<br>
need to be compiled by giving the corresponding parameters to ./configure.<br>
<div><br>
Regards,<br>
Noel Kuntze<br>
<br>
GPG Key id: 0x63EC6658<br>
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658<br>
<br>
</div>Am 18.08.2014 um 15:12 schrieb <a href="mailto:amysue.z@gmail.com" target="_blank">amysue.z@gmail.com</a>:<br>
<div>> I also want to know are there any special configurations to install strongswan for ikev2 mobike?<br>
><br>
> For install strongswan to my pc, I just<br>
</div>> /./configure/<br>
> /make/<br>
> /make install/<br>
> /<br>
> /<br>
> Thanks,<br>
><br>
><br>
> 2014-08-18 21:08 GMT+08:00 <<a href="mailto:amysue.z@gmail.com" target="_blank">amysue.z@gmail.com</a> <mailto:<a href="mailto:amysue.z@gmail.com" target="_blank">amysue.z@gmail.com</a>>>:<br>
<div>><br>
> Hi Noel,<br>
> The output of "ipsec statusall" is<br>
</div><div>> /Status of IKE charon daemon (strongSwan 5.0.2, Linux 2.6.18-348.1.1.el5, i686):/<br>
> / uptime: 14 minutes, since Aug 18 18:21:46 2014/<br>
> / malloc: sbrk 135168, mmap 0, used 86616, free 48552/<br>
> / worker threads: 8 of 16 idle, 7/1/0/0 working, job queue: 0/0/0/0, scheduled: 0/<br>
> / loaded plugins: charon aes des sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default stroke updown eap-md5 eap-radius xauth-generic/<br>
> /Listening IP addresses:/<br>
> / <a href="http://192.168.2.6/" target="_blank">192.168.2.6/</a><br>
> / <a href="http://12.12.1.203/" target="_blank">12.12.1.203/</a><br>
> /Connections:/<br>
</div>> /Security Associations (0 up, 0 connecting):/<br>
> / none/<br>
<div>><br>
> AndŁ¬ how do I enable logging[1] ? I don't use strongswan much, So it feel difficult for me.<br>
> Thank you again for your help<br>
><br>
><br>
><br>
</div>> 2014-08-18 21:02 GMT+08:00 Noel Kuntze <<a href="mailto:noel@familie-kuntze.de" target="_blank">noel@familie-kuntze.de</a> <mailto:<a href="mailto:noel@familie-kuntze.de" target="_blank">noel@familie-kuntze.de</a>>>:<br>
<div>><br>
> Hello,<br>
><br>
> Check your system log for errors and show us the output of "ipsec statusall".<br>
> Sometimes, it takes a couple of seconds for the daemon to load the configuration. Waiting a bit can help in this case.<br>
> The reason for this is, that all the ipsec commands are asynchronous.<br>
> If the configuration isn't loaded for a couple of seconds, please enable logging[1].<br>
> StrongSwan can handle Mobike. It's a daemon thing, not a kernel thing.<br>
><br>
> [1] <a href="https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration" target="_blank">https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration</a><br>
><br>
> Regards,<br>
> Noel Kuntze<br>
><br>
> GPG Key id: 0x63EC6658<br>
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658<br>
><br>
</div>> Am 18.08.2014 um 14:56 schrieb <a href="mailto:amysue.z@gmail.com" target="_blank">amysue.z@gmail.com</a> <mailto:<a href="mailto:amysue.z@gmail.com" target="_blank">amysue.z@gmail.com</a>>:<br>
<div><div>>> Hello,<br>
><br>
>> My OS is centos 5.9 and i have installed Linux strongSwan U5.0.2/K2.6.18-348.1.1.el5.<br>
>> After installation,i start strongswan:<br>
>> ipsec start<br>
>> then i up an connection:<br>
>> ipsec up client<br>
>> then I get an error:*no config named 'client'*<br>
>> Actually, I define an connection in /etc/ipsec.conf.<br>
><br>
>> Below is my /etc/ipsec.conf<br>
><br>
>> /config setup/<br>
>> / strictcrlpolicy=no/<br>
>> / charonstart=yes/<br>
>> /<br>
>> /<br>
>> /conn %default/<br>
>> / ikelifetime=28800s/<br>
>> / keylife=28800s/<br>
>> / rekeymargin=3m/<br>
>> / keyingtries=3/<br>
>> / keyexchange=ikev2/<br>
>> / ike=3des-sha1-modp1024/<br>
>> / esp=3des-sha1/<br>
>> /<br>
>> /<br>
>> /conn client/<br>
</div></div>>> / left=<a href="http://12.12.1.203/" target="_blank">12.12.1.203/</a> <<a href="http://12.12.1.203/" target="_blank">http://12.12.1.203/</a>><br>
<div>>> / leftsourceip=%config/<br>
>> / leftcert=client1_cert.pem/<br>
>> / leftid="/C=CN/ST=SH/O=CS/CN=IKEv2_Client1"/<br>
</div>>> / right=<a href="http://11.11.11.200/" target="_blank">11.11.11.200/</a> <<a href="http://11.11.11.200/" target="_blank">http://11.11.11.200/</a>><br>
>> / rightid="/C=CN/ST=SH/O=CS/CN=11.11.11.200"/<br>
>> / rightsubnet=<a href="http://192.168.168.0/24" target="_blank">192.168.168.0/24</a> <<a href="http://192.168.168.0/24" target="_blank">http://192.168.168.0/24</a>> <<a href="http://192.168.168.0/24" target="_blank">http://192.168.168.0/24</a>>/<br>
<div>>> / auto=add/<br>
>> /<br>
>> /<br>
>> I have no idea what to do now, I really need your help, any one could help me?<br>
>> Thank you very much<br>
><br>
><br>
><br>
>> _______________________________________________<br>
>> Users mailing list<br>
</div>>> <a href="mailto:Users@lists.strongswan.org" target="_blank">Users@lists.strongswan.org</a> <mailto:<a href="mailto:Users@lists.strongswan.org" target="_blank">Users@lists.strongswan.org</a>><br>
>> <a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br>
><br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.strongswan.org" target="_blank">Users@lists.strongswan.org</a> <mailto:<a href="mailto:Users@lists.strongswan.org" target="_blank">Users@lists.strongswan.org</a>><br>
<div>> <a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br>
><br>
><br>
><br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2<br>
<br>
</div>iQIcBAEBAgAGBQJT8fycAAoJEDg5KY9j7GZYpTcP/iukAF34z42AVNwxbTo3Ow8t<br>
+aNESIoYH+8VLpQM2ZKLt3GNd9Ni4TqQkn3pz2+R21jx+2x1vSqhtfUa8UjxsXsl<br>
UNfmOzAjw9eNFiR8XvtmD/oMJecitea++l0zQKKwoUEWujvrk+ADf48/ixMEVkxN<br>
h99mC5qkvo878regENvBwn6nRgnT13n2wlIDE/WHyLCCcQWol3DJifYU/acUYWIj<br>
ixn+LLeIOz6xJdCWMj914KeRo/P+cmhoUx/su4+DRtIE3oIO0scYVsjkewIBBBy/<br>
l8TZ3+jn+CeQ/OvmiJHVhoMhUTN2cjUw/CKOQsiD1Mzke3S/ZgE0VghKQEKYFJnF<br>
r09O2D7ML0gf8p5F0psXYf7Z3Md8Hyma9X8CJleZ+UZbciVPshW2eniDUGOTX9F1<br>
dalsDT9IuIAeeTYFqXG1Hpu70adbBdOtMStNiFms4qp09YU5lya1PDHiW6OJQJzk<br>
qLd/4p0XU11M7FIlX77EY+erzqa0ocTX/anhU4d8kaHj/yscjs+jCut3h3yMh1Wr<br>
jZMmSd2Sya+y7mVWGJZM6J881oKmWBOZnxAbUz8GWVqS0YrL5xONZflCXcJ7AlM6<br>
rsdomGi69E7uOUeoS2Ophik+KPFU3z1YXPekwoZ1G5lpGO3AcPR1k6JlG0kc5kPU<br>
LeKodA7uufdB3uaXDmo/<br>
=v2BP<br>
-----END PGP SIGNATURE-----<br>
</blockquote></div></div></div><br></div>
</blockquote></div><br></div>