<!DOCTYPE html><html><head>
<style type="text/css">body { font-family:'DejaVu Sans Mono'; font-size:12px}</style>
</head>
<body><div>Hi,</div><div><br></div><div>I am hoping someone can help me. At first this looks like a simple error but I don't think it is.</div><div><br></div><div><br></div><div>To put this into some context, so you can ignore this paragraph if you're not interested.</div><div><br></div><div>A few months ago, I got my home PC - (Gentoo Linux) setup to VPN into the office which is a Windows environment. Shortly after I moved house and my phone line. Only at that time my ISP had a fault on the phone line at my new house so no internet connection. Once the internet was resolved, the first thing I did was update my PC. Next I found that my VPN was no longer working. I was careful to look for messages that required configuration updates, I saw none for StrongSwan.</div><div><br></div><div><br></div><div><br></div><div><br></div><div>Code:<br><br> * Starting ... <br> /etc/strongswan.d/VPN.conf:1: syntax error, unexpected NAME, expecting NEWLINE or '{' or '=' [vpn] <br> invalid config file '/etc/strongswan.conf' <br> Starting strongSwan 5.2.2 IPsec [starter]... <br><br><br><br>Code:<br><br> # ipsec up vpn.office.com <br> /etc/strongswan.d/VPN.conf:1: syntax error, unexpected NAME, expecting NEWLINE or '{' or '=' [vpn] <br> invalid config file '/etc/strongswan.conf' <br> initiating Main Mode IKE_SA vpn.office.com[1] to 17.11.7.5 <br> generating ID_PROT request 0 [ SA V V V V ] <br> sending packet: from 1.2.3.4[500] to 17.11.7.5[500] (212 bytes) <br> received packet: from 17.11.7.5[500] to 1.2.3.4[500] (116 bytes) <br> parsed ID_PROT response 0 [ SA V V ] <br> received draft-ietf-ipsec-nat-t-ike-02\n vendor ID <br> received FRAGMENTATION vendor ID <br> generating ID_PROT request 0 [ KE No NAT-D NAT-D ] <br> sending packet: from 1.2.3.4[500] to 17.11.7.5[500] (244 bytes) <br> received packet: from 17.11.7.5[500] to 1.2.3.4[500] (304 bytes) <br> parsed ID_PROT response 0 [ KE No V V V V NAT-D NAT-D ] <br> received Cisco Unity vendor ID <br> received XAuth vendor ID <br> received unknown vendor ID: [Available On Request] <br> received unknown vendor ID: [Available On Request] <br> local host is behind NAT, sending keep alives <br> generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ] <br> sending packet: from 1.2.3.4[4500] to 17.11.7.5[4500] (84 bytes) <br> received packet: from 17.11.7.5[4500] to 1.2.3.4[4500] (84 bytes) <br> parsed ID_PROT response 0 [ ID HASH V ] <br> received DPD vendor ID <br> IKE_SA vpn.office.com[1] established between 1.2.3.4[1.2.3.4]...17.11.7.5[17.11.7.5] <br> generating QUICK_MODE request [Available On Request] [ HASH SA No ID ID NAT-OA NAT-OA ] <br> sending packet: from 1.2.3.4[4500] to 17.11.7.5[4500] (220 bytes) <br> received packet: from 17.11.7.5[4500] to 1.2.3.4[4500] (180 bytes) <br> parsed QUICK_MODE response [Available On Request] [ HASH SA No ID ID N(([Available On Request])) NAT-OA ] <br> received 28800s lifetime, configured 0s <br> no acceptable traffic selectors found <br> establishing connection 'vpn.office.com' failed <br><br><br><br> The only other issue of note is that the behaviour of Networkmanager appears to have changed during boot. Previously, there was a 1 second wait, now that is gone. I have searched the web for similar issues and found none. <br><br> The details of how my VPN came to be setup as it is are available here:<br>https://forums.gentoo.org/viewtopic-t-998042-postdays-0-postorder-asc-start-0.html</div><div><br></div><div><br></div><div>code:</div><div><br></div><div># strongswan.conf - strongSwan configuration file<br>#<br># Refer to the strongswan.conf(5) manpage for details<br>#<br># Configuration changes should be made in the included files<br><br>charon {<br> load_modular = yes<br> plugins {<br> include strongswan.d/charon/*.conf<br> }<br>}<br><br>include strongswan.d/*.conf</div><div><br></div><div><br></div><div><br></div><div>code:</div><div><br></div><div># strongswan.d/VPN.conf</div><div><br></div><div>conn VPN-OFFICE-COM</div><div>keyexchange=ikev1 <br> type=transport <br> authby=secret <br> ike=3des-sha1-modp1024 <br> rekey=no <br> left=%defaultroute <br> leftprotoport=udp/l2tp <br> right=vpn.office.com <br> rightprotoport=udp/l2tp <br> rightid=17.11.7.5 <br> auto=add<br></div><div><br></div><div><br></div><div>At the time of writing I have just tried commenting out the whole of VPN.conf and then going line by line uncommenting but now even with all the lines uncommented, I get this message.</div><div><br></div><div>code:</div><div><br></div><div># ipsec up VPN-OFFICE-COM </div><div>/etc/strongswan.d/Xerox.conf:15: syntax error, unexpected NAME, expecting NEWLINE or '{' or '=' [VPN-OFFICE-COM]<br>invalid config file '/etc/strongswan.conf'<br>no config named 'VPN-OFFICE-COM'</div><div><br></div><div><br></div><div>Please help!</div><div><br></div><div><br></div><div><br></div><div id="M2Signature"><div>-- </div><div><div>Kind regards<br><br><br>Stephen Feyrer<br></div></div></div></body></html>