<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 10.00.9200.16798"></HEAD>
<BODY style="FONT: 10pt Segoe UI; MARGIN: 4px 4px 1px">
<DIV>Hi Martin,</DIV>
<DIV> </DIV>
<DIV>Just a quick note to say that this helped me a lot. I realise that it's a long time since you sent this email. Initially I still couldn't get my site to site VPN to work. I returned to it in the last two weeks and now have it working.</DIV>
<DIV> </DIV>
<DIV>We're now trialling it for use between our data centre and our Amazon Web Services environment with StrongSwan connecting to a Cisco router or ASA. So far the results have been very positive. Given the increased functionality and cost savings StrongSwan offers in comparison to Amazon's VPN offering. I would encourage anyone thinking of moving services to the cloud to explore StrongSwan and would be happy to share my experience with anyone thinking of doing so. I'd also encourage people to use GNS3 <A href="http://www.gns3.net/download/">http://www.gns3.net/download/</A> to trial and test StrongSwan.</DIV>
<DIV> </DIV>
<DIV>Finally, if anyone has any experience of creating encrypted GRE tunnels from a StrongSwan box to a Cisco router I'd love to hear from them :¬)</DIV>
<DIV> </DIV>
<DIV>Cheers,</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Tormod<BR><BR>>>> Martin Willi <martin@strongswan.org> 07/08/2014 12:33 >>><BR>Hi,<BR><BR>> Aug 7 12:06:03 A0089-Mint1 charon: 09[CFG] proposing traffic selectors for other:<BR>> Aug 7 12:06:03 A0089-Mint1 charon: 09[CFG] 10.2.0.0/24<BR>> Aug 7 12:06:03 A0089-Mint1 charon: 09[CFG] changing proposed traffic selectors for other:<BR>> Aug 7 12:06:03 A0089-Mint1 charon: 09[CFG] 0.0.0.0/0<BR><BR>The unity plugin widens the traffic selector as initiator, to later<BR>dynamically reduce it to what has been negotiated with the Split-Include<BR>Unity extension.<BR><BR>If the plugin is enabled, this is done on all connections where the<BR>Unity Vendor ID has been received, which is likely with Cisco boxes.<BR><BR>I've recently pushed a patch [1] which disables that behavior if no<BR>Split-Include attribute has been received on the connection. Please try<BR>that patch, I think it should fix this issue.<BR><BR>Regards<BR>Martin<BR><BR>[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=1a62fb0a<BR><BR></DIV><BR>
<div>
<div>
<div>
<font face="Arial" size="2" color="#008000">Please consider the
environment before printing this email</font><font face="Arial" size="2">
</font> </div>
</div>
</div>
<div>
<font face="Arial" size="2">
</font> </div>
<span class="f133 controlstyle" id="F133"><font face="Arial" size="2">*********************************************************************
</font></span><font face="Arial" size="2"><br><span class="f133 controlstyle" id="F133"><br>This
e-mail and any attachments are confidential. If it is not for you, please
inform us and delete it immediately without disclosing, copying, or
distributing it.<br><br>If the content is not about the business of
PayWizard Group PLC or its clients, then it is neither from nor sanctioned
by PayWizard Group PLC. Use of this or any other PayWizard Group PLC
e-mail facility signifies consent to interception by PayWizard Group PLC.
The views expressed in this email or any attachments may not reflect the
views and opinions of PayWizard Group PLC.<br><br>This message has been
scanned for viruses and dangerous content by MailScanner, but PayWizard
Group PLC accepts no liability for any damage caused by the transmission
of any viruses.<br><br>PayWizard Group PLC is a public limited company
registered in Scotland (SC175703) with its registered office at Cluny
Court, John Smith Business Park, Kirkcaldy, Fife, KY2 6QJ.<br><br>*******************************************************************</span>*</font>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</BODY></HTML>