<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.hps
{mso-style-name:hps;}
span.shorttext
{mso-style-name:short_text;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span class="hps"><span lang="EN">Hello,</span></span><span lang="EN">
<span class="hps">I can not connect</span> <span class="hps">from a Windows</span>
<span class="hps">client to the</span> <span class="hps">server</span> <span class="hps">
Strongswan</span>. <span class="hps">But</span> <span class="hps">I try</span> <span class="hps">
the</span> <span class="hps">Fritzbox</span> <span class="hps">should connect</span>
<span class="hps">to the</span> <span class="hps">server</span> <span class="hps">
Strongswan</span> <span class="hps">If this works</span>. <span class="hps">If I</span>
<span class="hps">want</span> <span class="hps">from a Windows</span> <span class="hps">
client to the</span> <span class="hps">Strongswan</span> <span class="hps">via VPN</span>
<span class="hps">connection</span> <span class="hps">I get</span> <span class="hps">
the error</span> <span class="hps">800”</span><span class="MsoHyperlinkFollowed">
</span><span class="hps">The VPN</span><span class="shorttext"> </span><span class="hps">server may be</span><span class="shorttext">
</span><span class="hps">unreachable.”(But with the Fritzbox I can connect?) </span>
<span class="hps">In the log</span> <span class="hps">files</span> <span class="hps">
If</span> <span class="hps">nothing</span>. <span class="hps">Only the</span> <span class="hps">
Fritzbox</span> <span class="hps">are</span> <span class="hps">compounds</span> <span class="hps">
with the</span> <span class="hps">Strongswan</span> <span class="hps">server. <o:p>
</o:p></span></span></p>
<p class="MsoNormal"><span class="hps"><span lang="EN"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span class="hps"><span lang="EN" style="background:yellow;mso-highlight:yellow">Ipsec.conf:
<o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow">conn %default<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> keyexchange=ikev2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> ike=aes256-sha1-modp1024!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> esp=aes256-sha1!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> dpdaction=clear<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> dpddelay=300s<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> rekey=no<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow">conn win7
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> left=%any<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> leftsubnet=10.254.254.0/24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> leftauth=pubkey<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> leftcert=serverCert.pem<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> leftid=@vpn.VPNServ.de<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> right=%any<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> rightsourceip=10.10.3.0/24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> rightauth=eap-mschapv2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> #rightsendcert=never # see note<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> eap_identity=%any<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow"> auto=add</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="background:lime;mso-highlight:lime">ipsec.secrets:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:lime;mso-highlight:lime"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="background:lime;mso-highlight:lime">: RSA serverKey.pem<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:lime;mso-highlight:lime"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="background:lime;mso-highlight:lime">marc : EAP "xxxxxxxxx"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:lime;mso-highlight:lime">marc : XAUTH "xxxxxxxx"</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">IPsec Statusall:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">root@s17338927:~# ipsec statusall<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">Status of IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-49-generic, x86_64):<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> uptime: 3 seconds, since Apr 09 10:59:23 2015<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> malloc: sbrk 1351680, mmap 0, used 341968, free 1009712<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink
resolve socket-default stroke updown eap-identity eap-mschapv2 eap-peap xauth-generic addrblock<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">Virtual IP pools (size/online/offline):<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> 192.168.178.0/24: 254/0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">Listening IP addresses:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> ServerIP<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> 10.254.254.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> 2001:8d8:881:1c00::72:88bd<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">Connections:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> win7: %any...%any IKEv2, dpddelay=300s<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> win7: local: [vpn.VPNServ.de] uses public key authentication<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> win7: cert: "C=DE, O=VPNGLA, CN=vpn.VPNServ.de"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> win7: remote: uses EAP_MSCHAPV2 authentication with EAP identity '%any'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> win7: child: 10.254.254.0/24 === dynamic TUNNEL, dpdaction=clear<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red">Security Associations (0 up, 0 connecting):<o:p></o:p></span></p>
<p class="MsoNormal"><span style="background:red;mso-highlight:red"> None</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Mit freundlichen Grüßen aus Gladbeck<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">-------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Marc Müller<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">_______________________________________________<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">APITSolutions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Andreas Patzelt IT Solutions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Krusenkamp 24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">45964 Gladbeck<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Telefon: 02043 / 9357169<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Fax: 02043 / 9350639<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">E-Mail: </span>
<span style="mso-fareast-language:DE"><a href="mailto:marc.mueller@apit-solutions.de"><span style="color:blue">marc.mueller@apit-solutions.de</span></a><span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Web: </span>
<span style="mso-fareast-language:DE"><a href="http://apit-solutions.de"><span style="color:blue">http://apit-solutions.de</span></a><span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">USt-IdNr.: DE273467836
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Geschäftsführung und Verantwortlichkeit:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Andreas Patzelt</span><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>