<!DOCTYPE html><html><head>
<style type="text/css">body { font-family:'DejaVu Sans Mono'; font-size:12px}</style>
</head>
<body><div>Hi Miroslav,</div><div><br></div><div>Thank you. The conn section as presented below was copied and pasted from web page for convenience (this stripped the leading white spaced from the conn section). For the moment the white spaces are in form of TAB characters. I will test with space characters and complete this email.</div><div><br></div><div>I Apologise for the lack of white spaces in the conn section of below email. I have now tested with both spaces and tabs, each producing the same error as below.</div><div><br></div><div><br></div><div>--</div><div>Kind regards</div><div><br></div><div>Stephen Feyrer.</div><div><br></div><div><br></div><div>On Sat, 18 Apr 2015 13:25:20 +0100, Miroslav Svoboda <goodmirek@goodmirek.cz> wrote:<br></div><br><blockquote style="margin: 0 0 0.80ex; border-left: #0000FF 2px solid; padding-left: 1ex"><div dir="ltr"><div><div>Hi Stephen,</div><div><br></div><div>I believe the issue might be caused as the "conn" section is not compliant with prescribed format. There should be at least one whitespace at the beginning of each line within the section. Only sections can and shall start at the first character of the line.</div><div><br></div><div>Supposed correction:</div><div><div><font face="monospace, monospace"><b>conn VPN-OFFICE-COM</b></font></div><div><font face="monospace, monospace"><b> keyexchange=ikev1</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>type=transport</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>authby=secret</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>ike=3des-sha1-modp1024</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>rekey=no</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>left=%defaultroute</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>leftprotoport=udp/l2tp</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>right=<a href="http://vpn.office.com">vpn.office.com</a></b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>rightprotoport=udp/l2tp</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>rightid=17.11.7.5</b></font></div><div><b style="font-family:monospace,monospace"> </b><font face="monospace, monospace"><b>auto=add</b></font></div></div><div><br></div><div>Regards,</div><div>Miroslav</div><div><br></div><div>Message: 3</div><div>Date: Fri, 17 Apr 2015 14:08:57 +0100</div><div>From: "Stephen Feyrer" <<a href="mailto:stephen.feyrer@btinternet.com">stephen.feyrer@btinternet.com</a>></div><div>To: <a href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</a></div><div>Subject: Re: [strongSwan] /etc/strongswan.d/VPN.conf:1: syntax error,</div><div> unexpected NAME, expecting NEWLINE or '{' or '=' [vpn]</div><div>Message-ID: <<a href="mailto:op.xw8ms7kfx77qtv@sveta.home.org">op.xw8ms7kfx77qtv@sveta.home.org</a>></div><div>Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes</div><div><br></div><div>Hi Neol,</div><div><br></div><div>Thank you. I have removed the file /etc/strongswan.d/VPN.conf</div><div><br></div><div>In /etc/ipsec.conf I have the same configuration. At least there is</div><div>progress, unfortunately I am still baffled. This is the previously</div><div>working configuration.</div><div><br></div><div>code:</div><div><br></div><div># ipsec.conf - strongSwan IPsec configuration file</div><div><br></div><div># basic configuration</div><div><br></div><div>config setup</div><div> # strictcrlpolicy=yes</div><div> # uniqueids = no</div><div><br></div><div>conn VPN-OFFICE-COM</div><div>keyexchange=ikev1</div><div>type=transport</div><div>authby=secret</div><div>ike=3des-sha1-modp1024</div><div>rekey=no</div><div>left=%defaultroute</div><div>leftprotoport=udp/l2tp</div><div>right=<a href="http://vpn.office.com">vpn.office.com</a></div><div>rightprotoport=udp/l2tp</div><div>rightid=17.11.7.5</div><div>auto=add</div><div><br></div><div><br></div><div>Having restarted ipsec, I get the following result</div><div><br></div><div>code:</div><div><br></div><div># ipsec up VPN-OFFICE-COM</div><div>initiating Main Mode IKE_SA VPN-OFFICE-COM[1] to 17.11.7.5</div><div>generating ID_PROT request 0 [ SA V V V V ]</div><div>sending packet: from 1.2.3.4[500] to 17.11.7.5[500] (212 bytes)</div><div>received packet: from 17.11.7.5[500] to 1.2.3.4[500] (116 bytes)</div><div>parsed ID_PROT response 0 [ SA V V ]</div><div>received draft-ietf-ipsec-nat-t-ike-02\n vendor ID</div><div>received FRAGMENTATION vendor ID</div><div>generating ID_PROT request 0 [ KE No NAT-D NAT-D ]</div><div>sending packet: from 1.2.3.4[500] to 17.11.7.5[500] (244 bytes)</div><div>received packet: from 17.11.7.5[500] to 1.2.3.4[500] (304 bytes)</div><div>parsed ID_PROT response 0 [ KE No V V V V NAT-D NAT-D ]</div><div>received Cisco Unity vendor ID</div><div>received XAuth vendor ID</div><div>received unknown vendor ID: [Available On Request]</div><div>received unknown vendor ID: [Available On Request]</div><div>local host is behind NAT, sending keep alives</div><div>generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]</div><div>sending packet: from 1.2.3.4[4500] to 17.11.7.5[4500] (84 bytes)</div><div>received packet: from 17.11.7.5[4500] to 1.2.3.4[4500] (84 bytes)</div><div>parsed ID_PROT response 0 [ ID HASH V ]</div><div>received DPD vendor ID</div><div>IKE_SA VPN-OFFICE-COM[1] established between</div><div>1.2.3.4[1.2.3.4]...17.11.7.5[17.11.7.5]</div><div>generating QUICK_MODE request [Available On Request] [ HASH SA No ID ID</div><div>NAT-OA NAT-OA ]</div><div>sending packet: from 1.2.3.4[4500] to 17.11.7.5[4500] (220 bytes)</div><div>received packet: from 17.11.7.5[4500] to 1.2.3.4[4500] (180 bytes)</div><div>parsed QUICK_MODE response [Available On Request] [ HASH SA No ID ID</div><div>N((24576)) NAT-OA ]</div><div>received 28800s lifetime, configured 0s</div><div>no acceptable traffic selectors found</div><div>establishing connection 'VPN-OFFICE-COM' failed</div><div><br></div><div><br></div><div><br></div><div>--</div><div>Kind regards</div><div><br></div><div><br></div><div>Stephen Feyrer<br></div></div></div></blockquote></body></html>