<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:10px"><div id="yui_3_16_0_1_1438605705372_4045">Hi,</div><div id="yui_3_16_0_1_1438605705372_4151"><br></div><div id="yui_3_16_0_1_1438605705372_5604" dir="ltr">I am trying to establish simple PSK IPSec session between 2 ubuntu systems. <br></div><div id="yui_3_16_0_1_1438605705372_5603" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4245" dir="ltr">configs are : <br></div><div id="yui_3_16_0_1_1438605705372_4244" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4247" dir="ltr"><u><b>ipsec.conf</b></u></div><div id="yui_3_16_0_1_1438605705372_4274" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4243" dir="ltr">config setup<br class=""> charondebug="ike 5, chd 5, cfg 5, net 5, enc 5, lib 5, mgr 5, knl 5 dmn 5"<br class=""><br class="">conn default<br class=""> ikelifetime=60m<br class=""> keylife=20m<br class=""> rekeymargin=3m<br class=""> keyingtries=1<br class=""> authby=secret<br class=""> keyexchange=ikev2<br class=""> mobike=no<br class=""><br class="">conn home<br class=""> left=192.168.1.5<br class=""> leftid=@moon.strongswan.org<br class=""># leftauth=psk<br class=""># leftauth=pubkey<br class=""> leftsubnet=192.168.1.5/32<br class=""> leftfirewall=yes<br class=""> right=192.168.1.16<br class=""> rightid=ashok@strongswan.org<br class=""> rightsubnet=192.168.1.16/32<br class=""># rightauth=psk<br class=""> ike=3des-md5-modp768!<br class=""> esp=aes128-sha1-modp1024!<br class=""># auto=add<br class=""> auto=start</div><div id="yui_3_16_0_1_1438605705372_4277" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4316" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4317" dir="ltr"><b><u>ipsec.secrets</u></b></div><div id="yui_3_16_0_1_1438605705372_4327" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4330" dir="ltr">ashok@strongswan.org : PSK "@password11"<br class="">@moon.strongswan.org : PSK "@password1"<br class="">#: PSK "mysecret"</div><div id="yui_3_16_0_1_1438605705372_4361" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4403" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4404" dir="ltr"><u><b>strongswan.conf</b></u></div><div id="yui_3_16_0_1_1438605705372_4405" dir="ltr">charon {<br class=""> load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default fips-prf eap-md5 updown<br class="">}<br class=""></div><div id="yui_3_16_0_1_1438605705372_4406" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4407" dir="ltr">though everything looks to be correct. Tunnel is not coming up.</div><div id="yui_3_16_0_1_1438605705372_4586" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4584" dir="ltr">I could see IKE session comes up later it is getting destroyed,</div><div id="yui_3_16_0_1_1438605705372_4587" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4583" dir="ltr">root@user-Lenovo-Product:/home/user# ipsec statusall<br class="">Status of IKE charon daemon (strongSwan 5.3.2, Linux 3.13.0-45-generic, i686):<br class=""> uptime: 23 seconds, since Aug 03 19:15:51 2015<br class=""> malloc: sbrk 1081344, mmap 0, used 105848, free 975496<br class=""> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 1<br class=""> loaded plugins: charon aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default fips-prf updown<br class="">Listening IP addresses:<br class=""> 192.168.1.5<br class=""> 192.168.100.1<br class="">Connections:<br class=""> home: 192.168.1.5...192.168.1.16 IKEv1/2<br class=""> home: local: [moon.strongswan.org] uses public key authentication<br class=""> home: remote: [ashok@strongswan.org] uses public key authentication<br class=""> home: child: 192.168.1.5/32 === 192.168.1.16/32 TUNNEL<br class="">Security Associations <b>(0 up, 1 connecting):</b><br class=""> (unnamed)[2]: CONNECTING, 192.168.1.5[%any]...192.168.1.16[%any]<br class=""> (unnamed)[2]: IKEv2 SPIs: bb7cf8b864a3a82d_i 09ba6f5bcbb60829_r*<br class=""> (unnamed)[2]: IKE proposal: 3DES_CBC/HMAC_MD5_96/PRF_HMAC_MD5/MODP_768<br class=""> (unnamed)[2]: Tasks passive: IKE_CERT_PRE IKE_AUTH IKE_CERT_POST IKE_CONFIG CHILD_CREATE IKE_AUTH_LIFETIME IKE_MOBIKE <br class=""></div><div id="yui_3_16_0_1_1438605705372_4618" dir="ltr"><br></div><br><div id="yui_3_16_0_1_1438605705372_4620" dir="ltr">root@user-Lenovo-Product:/home/user# ipsec statusall<br class="">Status of IKE charon daemon (strongSwan 5.3.2, Linux 3.13.0-45-generic, i686):<br class=""> uptime: 41 seconds, since Aug 03 19:15:51 2015<br class=""> malloc: sbrk 1081344, mmap 0, used 98048, free 983296<br class=""> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 0<br class=""> loaded plugins: charon aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default fips-prf updown<br class="">Listening IP addresses:<br class=""> 192.168.1.5<br class=""> 192.168.100.1<br class="">Connections:<br class=""> home: 192.168.1.5...192.168.1.16 IKEv1/2<br class=""> home: local: [moon.strongswan.org] uses public key authentication<br class=""> home: remote: [ashok@strongswan.org] uses public key authentication<br class=""> home: child: 192.168.1.5/32 === 192.168.1.16/32 TUNNEL<br class="">Security Associations (<b id="yui_3_16_0_1_1438605705372_4891">0 up, 0 connecting</b>):<br class=""> none<br class="">root@user-Lenovo-Product:/home/user# <br class=""><br></div><div id="yui_3_16_0_1_1438605705372_4716" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4717" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4628" dir="ltr"> I also looked into the log "/var/log/syslog" its says no private key found for the entity but I have configured it at "/etc/ipse.secrets"<br></div><div id="yui_3_16_0_1_1438605705372_4656" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4758" dir="ltr">Aug 3 19:15:55 user-Lenovo-Product charon: 14[IKE] reinitiating already active tasks<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[IKE] IKE_CERT_PRE task<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[IKE] IKE_AUTH task<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[ENC] added payload of type NOTIFY to message<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[ENC] added payload of type NOTIFY to message<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[ENC] added payload of type ID_RESPONDER to message<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[ENC] added payload of type ID_INITIATOR to message<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[ENC] added payload of type NOTIFY to message<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[IKE] <b id="yui_3_16_0_1_1438605705372_4760">no private key found for 'moon.strongswan.org'</b><br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[MGR] checkin and destroy IKE_SA home[1]<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[IKE] IKE_SA home[1] state change: CONNECTING => DESTROYING<br class="">Aug 3 19:15:55 user-Lenovo-Product charon: 14[MGR] check-in and destroy of IKE_SA successful<br class="">Aug 3 19:16:02 user-Lenovo-Product charon: 10[MGR] checkout IKE_SA<br class=""></div><div id="yui_3_16_0_1_1438605705372_4759" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4898" dir="ltr">May I know what am I missing? I have also attached the complete log as attachment for reference. <br></div><div id="yui_3_16_0_1_1438605705372_4959" dir="ltr">Thanks in advance for the needful.<br></div><div id="yui_3_16_0_1_1438605705372_4899" dir="ltr"><br></div><div id="yui_3_16_0_1_1438605705372_4900" dir="ltr">Regards</div><div id="yui_3_16_0_1_1438605705372_4960" dir="ltr">Ashok<br></div></div></body></html>