<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1446736026385_14179">Thanks for your reply, <br></div><div id="yui_3_16_0_1_1446736026385_14184"><br></div><div dir="ltr" id="yui_3_16_0_1_1446736026385_14226">do not reach the initiator (fd81:2041:94e6:1:921b:eff:fe4b:e4d9), i.e the first packet arrives to the reponder, then the responder can't reply<br></div><div id="yui_3_16_0_1_1446736026385_14181">PS : I could ping the responder <br></div><div id="yui_3_16_0_1_1446736026385_14182"><br></div><div id="yui_3_16_0_1_1446736026385_14125"><br></div><div id="yui_3_16_0_1_1446736026385_14124"><span></span></div>  <br><div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> Le Jeudi 5 novembre 2015 22h10, Thomas Egerer <hakke_007@gmx.de> a écrit :<br> </font> </div>  <br><br> <div class="y_msg_container">On 11/05/2015 04:14 PM, souhail sou wrote:<br clear="none">> Hello all, <br clear="none">> <br clear="none">> When starting my connection, I get the following output:<br clear="none">> initiating IKE_SA rw[2] to fd81:2041:94e6:1:b499:4837:54cd:e82c<br clear="none">> generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]<br clear="none">> sending packet: from fd81:2041:94e6:1:921b:eff:fe4b:e4d9[500] to fd81:2041:94e6:1:b499:4837:54cd:e82c[500] (724 bytes)<br clear="none">> retransmit 1 of request with message ID 0<br clear="none">> sending packet: from fd81:2041:94e6:1:921b:eff:fe4b:e4d9[500] to fd81:2041:94e6:1:b499:4837:54cd:e82c[500] (724 bytes)<br clear="none">Your packets do<br clear="none">a) not reach the responder (fd81:2041:94e6:1:b499:4837:54cd:e82c), or<br clear="none">b) do not reach the initiator (fd81:2041:94e6:1:921b:eff:fe4b:e4d9)<br clear="none"><br clear="none">Check your network connection and your peer to see where your packets<br clear="none">are dropped.<br clear="none"><br clear="none">Cheers,<br clear="none">Thomas<div class="yqt1608318854" id="yqtfd57605"><br clear="none">> <br clear="none">> <br clear="none">> My ipsec.conf :<br clear="none">> vi /usr/local/etc/ipsec.conf:<br clear="none">> # /etc/ipsec.conf - strongSwan IPsec configuration file<br clear="none">> <br clear="none">> config setup<br clear="none">> <br clear="none">> conn %default<br clear="none">>         ikelifetime=60m<br clear="none">>         keylife=20m<br clear="none">>         rekeymargin=3m<br clear="none">>         keyingtries=1<br clear="none">>         keyexchange=ikev2<br clear="none">>         authby=secret<br clear="none">> <br clear="none">> conn rw<br clear="none">>         left=fd81:2041:94e6:1:921b:eff:fe4b:e4d9<br clear="none">>         rightauth=psk<br clear="none">>         leftauth=psk<br clear="none">>         right=fd81:2041:94e6:1:b499:4837:54cd:e82c <br clear="none">>         auto=add<br clear="none">> <br clear="none">> For the pre shared key is the following <br clear="none">> vi /usr/local/etc/ipsec.secrets <br clear="none">> fd81:2041:94e6:1:b499:4837:54cd:e82c : PSK 0sjVzONCF02ncsgiSlmIXeqhGN<br clear="none">> <br clear="none">> Is there someone who have any idea to resolve it .Thanks in adavance, <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> _______________________________________________<br clear="none">> Users mailing list<br clear="none">> <a shape="rect" ymailto="mailto:Users@lists.strongswan.org" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br clear="none">> <a shape="rect" href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br clear="none">> <br clear="none"><br clear="none"></div><br><div class="yqt1608318854" id="yqtfd79270">_______________________________________________<br clear="none">Users mailing list<br clear="none"><a shape="rect" ymailto="mailto:Users@lists.strongswan.org" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br clear="none"><a shape="rect" href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a></div><br><br></div>  </div> </div>  </div></div></body></html>