<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 12px; font-family: 'Comic Sans MS', sans-serif;">
<div>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">I am attempting to setup a RHEL 7 based Strongswan server, with Macintosh based clients, using ipsec (the built in OS X Cisco client), and I am unable to get this to behave so far.</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">It appears to be issue with the certs? I have regenerated them on both sides several times and that does not seem to be resolving my issue here.</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Any insights into what I am missing in my setup, my hope is that this is just some simple newbie mistake I am doing.</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">My ipsec.conf file:</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">config setup</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo; min-height: 16px;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">conn %default</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>ikelifetime=60m</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>keylife=20m</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>rekeymargin=3m</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>keyingtries=1</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>keyexchange=ikev1</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>authby=secret</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>leftauth=psk</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"> <span class="Apple-tab-span" style="white-space:pre">
</span>rightauth=psk</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"> <span class="Apple-tab-span" style="white-space:pre">
</span>rightauth2=xauth</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>leftid=10.0.11.200</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>rightid=10.0.11.160</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo; min-height: 16px;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">conn rw-carol</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>also=rw</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>right=10.0.11.0/24</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>auto=add</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo; min-height: 16px;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">conn rw-dave</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>also=rw</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>right=10.0.11.0/24</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>auto=add</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo; min-height: 16px;"><span class="Apple-tab-span" style="white-space:pre"></span></p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">conn rw</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>left=10.0.11.200</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>leftsubnet=10.11.0.0/16</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"></p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><span class="Apple-tab-span" style="white-space:pre"></span>leftfirewall=yes</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">This is my ipsec.secrets file:</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">: RSA RH7Standard.vpnHostPrivateKey.der</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">: PSK “Password"</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">judeo %any : EAP "Password"</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">judeo %any : XAUTH "Password"</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">judeo %any : PSK "Password"</p>
<div><br>
</div>
<div><br>
</div>
<div>This is the error I am seeing in the logs:</div>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 10[IKE] 10.0.11.160 is initiating a Main Mode IKE_SA</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 10[ENC] generating ID_PROT response 0 [ SA V V V ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 10[NET] sending packet: from 10.0.11.200[500] to 10.0.11.160[500] (136 bytes)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[DMN] Starting IKE charon daemon (strongSwan 5.3.2, Linux 3.10.0-327.4.5.el7.x86_64, x86_64)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] openssl FIPS mode(2) - enabled</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] created TUN device: ipsec0</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[NET] could not open socket: Address family not supported by protocol</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[NET] could not open IPv6 socket, IPv6 disabled</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[KNL] received netlink error: Address family not supported by protocol (97)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[KNL] unable to create IPv6 routing table rule</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loading ca certificates from '/etc/strongswan/ipsec.d/cacerts'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded ca certificate "C=US, O=BSI, CN=RH7Standard.blansys.com" from '/etc/strongswan/ipsec.d/cacerts/RH7Standard.SelfSigned.CA.cert.strongswanCert.der'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded ca certificate "C=US, O=BSI, CN=RH7Standard.blansys.com" from '/etc/strongswan/ipsec.d/cacerts/RH7Standard.Converted.SelfSigned.CA.cert.pem'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loading aa certificates from '/etc/strongswan/ipsec.d/aacerts'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] opening directory '/etc/strongswan/ipsec.d/aacerts' failed: No such file or directory</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] reading directory failed</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loading ocsp signer certificates from '/etc/strongswan/ipsec.d/ocspcerts'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] opening directory '/etc/strongswan/ipsec.d/ocspcerts' failed: No such file or directory</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] reading directory failed</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loading attribute certificates from '/etc/strongswan/ipsec.d/acerts'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] opening directory '/etc/strongswan/ipsec.d/acerts' failed: No such file or directory</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] reading directory failed</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loading crls from '/etc/strongswan/ipsec.d/crls'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] opening directory '/etc/strongswan/ipsec.d/crls' failed: No such file or directory</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] reading directory failed</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loading secrets from '/etc/strongswan/ipsec.secrets'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded RSA private key from '/etc/strongswan/ipsec.d/private/RH7Standard.vpnHostPrivateKey.der'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded IKE secret for %any</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded EAP secret for judeo %any</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded EAP secret for judeo %any</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded IKE secret for judeo %any</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] loaded 0 RADIUS server configurations</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[TNC] MAP server certificate not defined</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[TNC] TNC recommendation policy is 'default'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[TNC] loading IMVs from '/etc/tnc_config'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[TNC] opening configuration file '/etc/tnc_config' failed: No such file or directory</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[CFG] missing PDP server name, PDP disabled</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[TNC] loading IMCs from '/etc/tnc_config'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[TNC] opening configuration file '/etc/tnc_config' failed: No such file or directory</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[LIB] loaded plugins: charon aes des rc2 sha1 sha2 md4 md5 random nonce x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey
pem openssl fips-prf gmp xcbc cmac hmac ctr ccm curl sqlite attr kernel-libipsec kernel-netlink resolve socket-default farp stroke vici updown eap-identity eap-md5 eap-gtc eap-mschapv2 eap-radius eap-tls eap-ttls eap-peap eap-tnc xauth-generic xauth-eap xauth-pam
xauth-noauth tnc-imc tnc-imv tnc-tnccs tnccs-20 tnccs-11 tnccs-dynamic dhcp</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 00[JOB] spawning 16 worker threads</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 11[CFG] received stroke: add connection 'rw-carol'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 11[CFG] added configuration 'rw-carol'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 13[CFG] received stroke: add connection 'rw-dave'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 13[CFG] added child to existing configuration 'rw-carol'</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[NET] received packet: from 10.0.11.160[500] to 10.0.11.200[500] (668 bytes)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V V V V ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received NAT-T (RFC 3947) vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-08 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-07 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-06 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-05 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-04 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received XAuth vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received Cisco Unity vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received FRAGMENTATION vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] received DPD vendor ID</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[IKE] 10.0.11.160 is initiating a Main Mode IKE_SA</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard strongswan: 10[ENC] generating ID_PROT response 0 [ SA V V V ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 11[NET] received packet: from 10.0.11.160[500] to 10.0.11.200[500] (292 bytes)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 11[ENC] parsed ID_PROT request 0 [ KE No NAT-D NAT-D ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 11[IKE] faking NAT situation to enforce UDP encapsulation</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 11[IKE] sending cert request for "C=US, O=BSI, CN=RH7Standard.blansys.com"</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 11[ENC] generating ID_PROT response 0 [ KE No CERTREQ NAT-D NAT-D ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:41 RH7Standard charon: 11[NET] sending packet: from 10.0.11.200[500] to 10.0.11.160[500] (376 bytes)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[NET] received packet: from 10.0.11.160[4500] to 10.0.11.200[4500] (1500 bytes)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[ENC] parsed ID_PROT request 0 [ ID CERT SIG CERTREQ N(INITIAL_CONTACT) ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[IKE] ignoring certificate request without data</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[IKE] received end entity cert "C=US, O=BSI, CN=judeo@blansys.com"</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[CFG] looking for XAuthInitRSA peer configs matching 10.0.11.200...10.0.11.160[C=US, O=BSI, CN=judeo@blansys.com]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[IKE] no peer config found</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[ENC] generating INFORMATIONAL_V1 request 2365044413 [ HASH N(AUTH_FAILED) ]</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"></p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;">Apr 18 09:45:42 RH7Standard charon: 12[NET] sending packet: from 10.0.11.200[4500] to 10.0.11.160[4500] (92 bytes)</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
<p style="margin: 0px; font-size: 14px; font-family: Menlo;"><br>
</p>
</div>
<div>
<div>
<div style="font-family: 'Helvetica Neue', sans-serif;">
<hr align="center" size=""3"" width=""95%"">
</div>
<div style="font-family: 'Helvetica Neue', sans-serif;"><br>
</div>
<div style="font-family: 'Helvetica Neue', sans-serif;"><span style="font-size: 13px; font-family: 'Comic Sans MS', sans-serif;">Jude Oliver</span></div>
<div style="font-family: 'Helvetica Neue', sans-serif;">Support</div>
<div>
<div style="font-family: 'Helvetica Neue', sans-serif;"><span style="font-size: 11px;"><font color="#6c6c6c">1100 Poydras St. Suite 1230</font></span></div>
<div style="font-family: 'Helvetica Neue', sans-serif;"><span style="font-size: 11px;"><font color="#6c6c6c">New Orleans, LA 70163</font></span></div>
<div style="font-family: 'Helvetica Neue', sans-serif;"><span style="font-size: 11px;"><font color="#6c6c6c">Main Office: 504-529-8869</font></span></div>
<div><font color="#6c6c6c" face="Helvetica Neue,sans-serif"><span style="font-size: 11px;">J</span></font><span style="color: rgb(108, 108, 108); font-family: 'Helvetica Neue', sans-serif; font-size: 11px;">oliver@blansys.com </span></div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><a href="http://www.blanchardsystems.com/" style="font-size: 11px; font-family: 'Helvetica Neue', sans-serif;">www.blanchardsystems.com</a></div>
<div style="font-family: 'Helvetica Neue', sans-serif;"><br>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<div style="font-size: 12px; font-family: Verdana, sans-serif;"><b><i>-----------------------------------------------------</i></b></div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;">
<div>
<div><b><i><font face="Helvetica Neue" size="2">Join Blanchard Systems</font></i></b></div>
<div><font face="Helvetica Neue" size="2"><br>
</font></div>
<div><b><font face="Helvetica Neue" size="2">2016 Tips and Tricks Training Webinars</font></b></div>
</div>
<div><font face="Helvetica Neue" size="2">Check out the Blanchard Systems 2015 FREE monthly Tips & Tricks training webinars. </font></div>
<div><font face="Helvetica Neue" size="2"><a href="http://www.blanchardsystems.com/events/"><b>Click Here</b></a> to view the schedule and register for one of our upcoming events.</font></div>
</div>
</div>
</div>
</div>
</body>
</html>