<div dir="ltr"><div style="font-size:14px;text-align:center">Excuse me.</div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center">I have some troubles on strongswan settings.</div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center">I want to set network like this.</div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><img src="cid:ii_14f3fa600c75ee16" alt="본문 이미지 1" width="544" height="293" class="CToWUd a6T" tabindex="0"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center">Upper picture is that G/W ===== G/W connection added the certificate verification server.</div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center">I success G/W ==== G/W connection like this.</div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><img src="cid:ii_14f3fa8f410d832c" alt="본문 이미지 2" width="544" height="117" class="CToWUd a6T" tabindex="0"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center">So, I referenced this configuration : <span style="color:rgb(0,0,0);font-family:'Malgun Gothic'">Test ikev2/rw-eap-md5-radius</span></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><a href="https://www.strongswan.org/uml/testresults/ikev2/rw-eap-md5-radius/index.html" target="_blank">https://www.strongswan.org/uml/testresults/ikev2/rw-eap-md5-radius/index.html</a><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><img src="https://www.strongswan.org/uml/testresults/images/a-m-c.png" alt="alice carol moon" class="CToWUd a6T" tabindex="0"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><b>FreeRadius ------------ moon = server(G/W) ----------------- sun = client(G/W)</b></div><div style="font-size:14px;text-align:center"><b><br></b></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center">but, I can set this network..</div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><div>who can solve this problem?? </div><div><br></div><div><br></div><div>please help me.</div><div style="text-align:start"><div dir="ltr"><div dir="ltr"><div></div></div></div></div></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px;text-align:center"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><b><font size="4"><Server configuration></font></b></div><div style="font-size:14px"><br></div><div style="font-size:14px"><font size="4">1) ipsec.conf</font></div><div style="font-size:14px"><br></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>config setup</div><div><br></div><div>conn %default</div><div> ikelifetime=60m</div><div> keylife=20m</div><div> rekeymargin=3m</div><div> keyingtries=1</div><div> keyexchange=ikev2</div><div> mobike=no</div><div><br></div><div>conn rw-eap</div><div> left=192.168.0.1</div><div> leftsubnet=<a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a></div><div> leftcert=moon.pem</div><div> leftid=strongswan moon</div><div> leftauth=pubkey</div><div> leftfirewall=yes</div><div> rightid=strongswan sun</div><div> rightauth=eap-md5</div><div> rightsendcert=never</div><div> right=192.168.0.2</div><div> auto=add</div></blockquote><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><font size="4">2) strongswan.conf</font></div><div style="font-size:14px"><br></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>charon {</div><div> load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac xcbc stroke kernel-netlink socket-default fips-prf eap-radius updown</div><div> plugins {</div><div> eap-radius {</div><div> secret = testing123</div><div> server = 129.254.72.87</div><div> }</div><div> }</div><div>}</div></blockquote><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><font size="4">3) ipsec.secrets</font></div><div style="font-size:14px"><br></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>: RSA moon.key "1p2p3p"</div><div>: RSA ca.key "1p2p3p"</div></blockquote><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><font size="4">4) ipsec statusall</font></div><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>Status of IKE charon daemon (strongSwan 5.2.2, Linux 3.13.0-61-generic, x86_64):</div><div> uptime: 26 minutes, since Aug 18 15:53:48 2015</div><div> malloc: sbrk 2428928, mmap 0, used 210880, free 2218048</div><div> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 0</div><div> loaded plugins: charon aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default fips-prf updown</div><div>Listening IP addresses:</div><div> 192.168.0.1</div><div> 129.254.73.189</div><div>Connections:</div><div> rw-eap: 192.168.0.1...192.168.0.2 IKEv2</div><div> rw-eap: local: [C=KR, ST=Some-State, O=Etri, CN=strongswan moon] uses public key authentication</div><div> rw-eap: cert: "C=KR, ST=Some-State, O=Etri, CN=strongswan moon"</div><div> rw-eap: remote: [strongswan sun] uses EAP_MD5 authentication</div><div> rw-eap: child: <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> === dynamic TUNNEL</div><div>Security Associations (0 up, 0 connecting):</div><div> none</div></blockquote><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><font size="4">5) <a name="14f3fb759c0f12c3_OLE_LINK6" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"><span lang="EN-US">tail -f </span></a><a name="14f3fb759c0f12c3_OLE_LINK19" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"><span lang="EN-US">/var/log/syslog </span></a><a name="14f3fb759c0f12c3_OLE_LINK18" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"></a><a name="14f3fb759c0f12c3_OLE_LINK17" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"></a><span lang="EN-US" style="line-height:17.85pt;background-color:rgb(248,248,248)">/var/log/auth.log</span></font></div><div style="font-size:14px"><span lang="EN-US" style="line-height:17.85pt;background-color:rgb(248,248,248)"><br></span></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">root@radSer:~# tail -f /var/log/syslog /var/log/auth.log</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">==> /var/log/syslog <==</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 10[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 10[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 10[NET] sending packet: from 192.168.0.1[500] to 192.168.0.2[500] (440 bytes)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[NET] received packet: from 192.168.0.2[500] to 192.168.0.1[500] (428 bytes)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr SA TSi TSr N(MULT_AUTH) N(EAP_ONLY) ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[CFG] looking for peer configs matching 192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]...192.168.0.2[strongswan sun]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[CFG] selected peer config 'rw-eap'</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[IKE] loading EAP_MD5 method failed</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[ENC] generating IKE_AUTH response 1 [ IDr EAP/FAIL ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 06[NET] sending packet: from 192.168.0.1[500] to 192.168.0.2[500] (156 bytes)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)"><br></span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">==> /var/log/auth.log <==</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 15:54:12 radSer charon: 07[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 15:55:57 radSer charon: 13[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:04:23 radSer charon: 08[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:06:31 radSer charon: 07[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:09:01 radSer CRON[13186]: pam_unix(cron:session): session opened for user root by (uid=0)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:09:01 radSer CRON[13186]: pam_unix(cron:session): session closed for user root</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:09:05 radSer charon: 12[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:17:01 radSer CRON[13201]: pam_unix(cron:session): session opened for user root by (uid=0)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:17:01 radSer CRON[13201]: pam_unix(cron:session): session closed for user root</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:23 radSer charon: 10[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)"><br></span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">==> /var/log/syslog <==</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 07[NET] received packet: from 192.168.0.2[500] to 192.168.0.1[500] (692 bytes)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 07[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 07[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)"><br></span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">==> /var/log/auth.log <==</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 07[IKE] 192.168.0.2 is initiating an IKE_SA</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)"><br></span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">==> /var/log/syslog <==</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 07[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 07[NET] sending packet: from 192.168.0.1[500] to 192.168.0.2[500] (440 bytes)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[NET] received packet: from 192.168.0.2[500] to 192.168.0.1[500] (428 bytes)</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr SA TSi TSr N(MULT_AUTH) N(EAP_ONLY) ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[CFG] looking for peer configs matching 192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]...192.168.0.2[strongswan sun]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[CFG] selected peer config 'rw-eap'</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[IKE] loading EAP_MD5 method failed</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[ENC] generating IKE_AUTH response 1 [ IDr EAP/FAIL ]</span></div><div><span lang="EN-US" style="line-height:23.7999992370605px;background-color:rgb(248,248,248)">Aug 18 16:21:32 radSer charon: 08[NET] sending packet: from 192.168.0.1[500] to 192.168.0.2[500] (156 bytes)</span></div></blockquote><div style="font-size:14px"><span lang="EN-US" style="line-height:17.85pt;background-color:rgb(248,248,248)"><br></span></div><div style="font-size:14px"><span lang="EN-US" style="line-height:17.85pt;background-color:rgb(248,248,248)"><br></span></div><div style="font-size:14px"><div><b><font size="4"><Client configuration></font></b></div><div><br></div><div><font size="4">1) ipsec.conf</font></div><div><br></div></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>config setup</div><div><br></div><div>conn %default</div><div> ikelifetime=60m</div><div> keylife=20m</div><div> rekeymargin=3m</div><div> keyingtries=1</div><div> keyexchange=ikev2</div><div> mobike=no</div><div><br></div><div>conn home</div><div> left=192.168.0.2</div><div> leftid=strongswan sun</div><div> leftauth=eap</div><div> leftfirewall=yes</div><div> right=192.168.0.1</div><div> rightcert=moon.pem</div><div> rightid=strongswan moon</div><div> rightsubnet=<a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a></div><div> rightauth=pubkey</div><div> auto=add</div></blockquote><div style="font-size:14px"><div><br></div><div><br></div><div><font size="4">2) strongswan.conf</font></div><div><br></div></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>charon {</div><div> load = aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 curl revocation hmac xcbc stroke kernel-netlink socket-default fips-prf eap-md5 updown</div><div>}</div></blockquote><div style="font-size:14px"><div><br></div><div><br></div><div><font size="4">3) ipsec.secrets</font></div><div><br></div></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>: RSA sun.key "1p2p3p"</div><div>: RSA moon.key "1p2p3p"</div><div>: EAP "testing123"</div></blockquote><div style="font-size:14px"><div><br></div><div><br></div><div><font size="4">4) ipsec statusall</font></div><div><br></div><div><br></div></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>root@radClient:/usr/local/etc# ipsec statusall</div><div>Status of IKE charon daemon (strongSwan 5.2.2, Linux 3.13.0-57-generic, x86_64):</div><div> uptime: 27 minutes, since Aug 18 15:57:06 2015</div><div> malloc: sbrk 266240, mmap 0, used 160160, free 106080</div><div> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 0</div><div> loaded plugins: charon aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac xcbc stroke kernel-netlink socket-default fips-prf updown</div><div>Listening IP addresses:</div><div> 192.168.0.55</div><div> 192.168.0.2</div><div> 129.254.73.188</div><div>Connections:</div><div> home: 192.168.0.2...192.168.0.1 IKEv2</div><div> home: local: [strongswan sun] uses EAP authentication</div><div> home: remote: [C=KR, ST=Some-State, O=Etri, CN=strongswan moon] uses public key authentication</div><div> home: cert: "C=KR, ST=Some-State, O=Etri, CN=strongswan moon"</div><div> home: child: dynamic === <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> TUNNEL</div><div>Security Associations (0 up, 0 connecting):</div><div> none</div></blockquote><div style="font-size:14px"><div><br></div><div><br></div><div><font size="4">5) <a name="14f3fb759c0f12c3_OLE_LINK6" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"><span lang="EN-US">tail -f </span></a><a name="14f3fb759c0f12c3_OLE_LINK19" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"><span lang="EN-US">/var/log/syslog </span></a><a name="14f3fb759c0f12c3_OLE_LINK18" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"></a><a name="14f3fb759c0f12c3_OLE_LINK17" style="color:rgb(34,34,34);line-height:17.85pt;background-color:rgb(248,248,248)"></a><span lang="EN-US" style="line-height:17.85pt;background-color:rgb(248,248,248)">/var/log/auth.log</span></font></div></div><div style="font-size:14px"><span lang="EN-US" style="line-height:17.85pt;background-color:rgb(248,248,248)"><br></span></div><blockquote style="font-size:14px;margin:0px 0px 0px 40px;border:none;padding:0px"><div>root@radClient:~# tail -f /var/log/syslog /var/log/auth.log</div><div>==> /var/log/syslog <==</div><div>Aug 18 16:24:52 radClient charon: 04[ENC] generating IKE_AUTH response 1 [ IDr SA TSi TSr N(AUTH_LFT) ]</div><div>Aug 18 16:24:52 radClient charon: 04[NET] sending packet: from 192.168.0.2[500] to 192.168.0.1[500] (188 bytes)</div><div>Aug 18 16:24:52 radClient charon: 06[NET] received packet: from 192.168.0.1[500] to 192.168.0.2[500] (76 bytes)</div><div>Aug 18 16:24:52 radClient charon: 06[ENC] parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]</div><div>Aug 18 16:24:52 radClient charon: 06[IKE] received DELETE for IKE_SA home[7]</div><div>Aug 18 16:24:52 radClient charon: 06[IKE] deleting IKE_SA home[7] between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div>Aug 18 16:24:52 radClient charon: 06[IKE] IKE_SA deleted</div><div>Aug 18 16:24:52 radClient vpn: - C=KR, ST=Some-State, O=Etri, CN=strongswan moon <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> == 192.168.0.1 -- 192.168.0.2</div><div>Aug 18 16:24:52 radClient charon: 06[ENC] generating INFORMATIONAL response 2 [ ]</div><div>Aug 18 16:24:52 radClient charon: 06[NET] sending packet: from 192.168.0.2[500] to 192.168.0.1[500] (76 bytes)</div><div><br></div><div>==> /var/log/auth.log <==</div><div>Aug 18 16:17:01 radClient CRON[21944]: pam_unix(cron:session): session closed for user root</div><div>Aug 18 16:22:36 radClient charon: 10[IKE] initiating IKE_SA home[5] to 192.168.0.1</div><div>Aug 18 16:22:36 radClient charon: 11[IKE] establishing CHILD_SA home</div><div>Aug 18 16:22:45 radClient charon: 05[IKE] initiating IKE_SA home[6] to 192.168.0.1</div><div>Aug 18 16:22:45 radClient charon: 07[IKE] establishing CHILD_SA home</div><div>Aug 18 16:24:52 radClient charon: 11[IKE] 192.168.0.1 is initiating an IKE_SA</div><div>Aug 18 16:24:52 radClient charon: 04[IKE] IKE_SA home[7] established between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div>Aug 18 16:24:52 radClient charon: 04[IKE] CHILD_SA home{7} established with SPIs cf138193_i c6249d33_o and TS <a href="http://192.168.0.2/32" target="_blank">192.168.0.2/32</a> === <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> </div><div>Aug 18 16:24:52 radClient charon: 06[IKE] deleting IKE_SA home[7] between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div>Aug 18 16:24:52 radClient charon: 06[IKE] IKE_SA deleted</div><div><br></div><div><br></div><div><br></div><div>==> /var/log/syslog <==</div><div>Aug 18 16:25:06 radClient charon: 15[NET] received packet: from 192.168.0.1[500] to 192.168.0.2[500] (692 bytes)</div><div>Aug 18 16:25:06 radClient charon: 15[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]</div><div>Aug 18 16:25:06 radClient charon: 15[IKE] 192.168.0.1 is initiating an IKE_SA</div><div><br></div><div>==> /var/log/auth.log <==</div><div>Aug 18 16:25:06 radClient charon: 15[IKE] 192.168.0.1 is initiating an IKE_SA</div><div><br></div><div>==> /var/log/syslog <==</div><div>Aug 18 16:25:06 radClient charon: 15[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]</div><div>Aug 18 16:25:06 radClient charon: 15[NET] sending packet: from 192.168.0.2[500] to 192.168.0.1[500] (440 bytes)</div><div>Aug 18 16:25:06 radClient charon: 05[NET] received packet: from 192.168.0.1[500] to 192.168.0.2[500] (556 bytes)</div><div>Aug 18 16:25:06 radClient charon: 05[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MULT_AUTH) N(EAP_ONLY) ]</div><div>Aug 18 16:25:06 radClient charon: 05[CFG] looking for peer configs matching 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div>Aug 18 16:25:06 radClient charon: 05[CFG] selected peer config 'home'</div><div>Aug 18 16:25:06 radClient charon: 05[CFG] no issuer certificate found for "C=KR, ST=Some-State, O=Etri, CN=strongswan moon"</div><div>Aug 18 16:25:06 radClient charon: 05[CFG] using trusted certificate "C=KR, ST=Some-State, O=Etri, CN=strongswan moon"</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] authentication of 'C=KR, ST=Some-State, O=Etri, CN=strongswan moon' with RSA signature successful</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] IKE_SA home[8] established between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div><br></div><div>==> /var/log/auth.log <==</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] IKE_SA home[8] established between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div><br></div><div>==> /var/log/syslog <==</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] scheduling reauthentication in 3301s</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] maximum IKE_SA lifetime 3481s</div><div><br></div><div>==> /var/log/auth.log <==</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] CHILD_SA home{8} established with SPIs ced18686_i c80415b6_o and TS <a href="http://192.168.0.2/32" target="_blank">192.168.0.2/32</a> === <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> </div><div><br></div><div>==> /var/log/syslog <==</div><div>Aug 18 16:25:06 radClient charon: 05[IKE] CHILD_SA home{8} established with SPIs ced18686_i c80415b6_o and TS <a href="http://192.168.0.2/32" target="_blank">192.168.0.2/32</a> === <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> </div><div>Aug 18 16:25:06 radClient vpn: + C=KR, ST=Some-State, O=Etri, CN=strongswan moon <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> == 192.168.0.1 -- 192.168.0.2</div><div>Aug 18 16:25:06 radClient charon: 05[ENC] generating IKE_AUTH response 1 [ IDr SA TSi TSr N(AUTH_LFT) ]</div><div>Aug 18 16:25:06 radClient charon: 05[NET] sending packet: from 192.168.0.2[500] to 192.168.0.1[500] (188 bytes)</div><div>Aug 18 16:25:06 radClient charon: 12[NET] received packet: from 192.168.0.1[500] to 192.168.0.2[500] (76 bytes)</div><div>Aug 18 16:25:06 radClient charon: 12[ENC] parsed INFORMATIONAL request 2 [ N(AUTH_FAILED) ]</div><div>Aug 18 16:25:06 radClient charon: 12[IKE] received DELETE for IKE_SA home[8]</div><div>Aug 18 16:25:06 radClient charon: 12[IKE] deleting IKE_SA home[8] between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div><br></div><div>==> /var/log/auth.log <==</div><div>Aug 18 16:25:06 radClient charon: 12[IKE] deleting IKE_SA home[8] between 192.168.0.2[strongswan sun]...192.168.0.1[C=KR, ST=Some-State, O=Etri, CN=strongswan moon]</div><div>Aug 18 16:25:06 radClient charon: 12[IKE] IKE_SA deleted</div><div><br></div><div>==> /var/log/syslog <==</div><div>Aug 18 16:25:06 radClient charon: 12[IKE] IKE_SA deleted</div><div><br></div><div>==> /var/log/auth.log <==</div><div><br></div><div>==> /var/log/syslog <==</div><div>Aug 18 16:25:06 radClient vpn: - C=KR, ST=Some-State, O=Etri, CN=strongswan moon <a href="http://129.254.72.0/24" target="_blank">129.254.72.0/24</a> == 192.168.0.1 -- 192.168.0.2</div><div>Aug 18 16:25:06 radClient charon: 12[ENC] generating INFORMATIONAL response 2 [ ]</div><div>Aug 18 16:25:06 radClient charon: 12[NET] sending packet: from 192.168.0.2[500] to 192.168.0.1[500] (76 bytes)</div></blockquote><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div style="font-size:14px"><br></div><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><span style="font-family:Gulim;font-size:13px">------------------------------</span><span style="font-family:Gulim;font-size:13px">------</span><br style="font-family:Gulim;font-size:13px"><span style="font-family:Gulim;font-size:13px">Hyun-jin Kim, Master's course</span><br style="font-family:Gulim;font-size:13px"><span style="font-family:Gulim;font-size:13px">Information Security Laboratory</span><br style="font-family:Gulim;font-size:13px"><span style="font-family:Gulim;font-size:13px">ChungNam National University </span><br style="font-family:Gulim;font-size:13px"><span style="font-family:Gulim;font-size:13px">E: </span><a href="mailto:be.successor@gmail.com" style="color:rgb(17,85,204);font-family:Gulim;font-size:13px" target="_blank">be.successor@gmail.com</a><br style="font-family:Gulim;font-size:13px"><span style="font-family:Gulim;font-size:13px">Tel : +82-10-4410-4292 / +82-42-821-7443</span><br style="font-family:Gulim;font-size:13px"><span style="font-family:Gulim;font-size:13px">------------------------------</span><span style="font-family:Gulim;font-size:13px">------</span><br></div></div></div></div></div></div></div>
</div>