<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1461318233421_5442"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5443">Hi,<o:p id="yui_3_16_0_ym19_1_1461318233421_5444"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5442"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5445"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5446">I am using strongSwan VPN Client google app in an android device
(VPN Client) and running strongswan-5.4.0 on Linux device (VPN Server on
Virtual Machine). I am trying to establish an IKEv2/IPsec tunnel using EAP
authentication based on username/password (EAP-MD5), AES encryption with SHA1
data integrity. I find that, Child SA is
being established at VPN server. <o:p id="yui_3_16_0_ym19_1_1461318233421_5447"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5448"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5449">But when it sends the IKE_AUTH response to client, it gives
the following error message in log i.e., “EAP-only authentication requires a mutual
and MSK deriving EAP method, but EAP_MD5 is not” and sends INFORMATIONAL
request 5 [ N(AUTH_FAILED) ] to server. As a result,<o:p id="yui_3_16_0_ym19_1_1461318233421_5450"></o:p></span></div><div style="text-indent:-.25in;mso-list:l0 level1 lfo1" id="yui_3_16_0_ym19_1_1461318233421_5451"><!--[if !supportLists]--><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin" id="yui_3_16_0_ym19_1_1461318233421_5452"> </span></div><div style="text-indent:-.25in;mso-list:l0 level1 lfo1" id="yui_3_16_0_ym19_1_1461318233421_5451"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"> 1)<span style="font-stretch: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';" id="yui_3_16_0_ym19_1_1461318233421_5453"> </span></span><!--[endif]--><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5454">The VPN
Server deletes IKE_SA/CHILD_SA .<o:p id="yui_3_16_0_ym19_1_1461318233421_5455"></o:p></span></div><div style="text-indent:-.25in;mso-list:l0 level1 lfo1" id="yui_3_16_0_ym19_1_1461318233421_5456"><!--[if !supportLists]--><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin" id="yui_3_16_0_ym19_1_1461318233421_5457"> 2)<span style="font-stretch: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';" id="yui_3_16_0_ym19_1_1461318233421_5458"> </span></span><!--[endif]--><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5459">The VPN
Client fails to establish VPN with user authentication failed.<o:p id="yui_3_16_0_ym19_1_1461318233421_5460"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5461"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5462"><o:p id="yui_3_16_0_ym19_1_1461318233421_5463"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5464"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5465">Can anyone please suggest where it goes wrong or if I have
missed anything ? Here go the Charon log, configuration used at both ends.<o:p id="yui_3_16_0_ym19_1_1461318233421_5466"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5467"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5468"><o:p id="yui_3_16_0_ym19_1_1461318233421_5469"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5470"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5471">Here go the Charon logs at Server end.<o:p id="yui_3_16_0_ym19_1_1461318233421_5472"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5473"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5474">00[JOB] spawning 16 worker threads<o:p id="yui_3_16_0_ym19_1_1461318233421_5475"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5476"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5477">charon (1559) started after 20 ms<o:p id="yui_3_16_0_ym19_1_1461318233421_5478"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5479"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5480">12[CFG] received stroke: add connection
'vpn_server-vpn_client'<o:p id="yui_3_16_0_ym19_1_1461318233421_5481"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5482"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5483">12[CFG] adding virtual IP address pool 10.0.2.15/32<o:p id="yui_3_16_0_ym19_1_1461318233421_5484"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5485"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5486">12[CFG] 'vpn_server-vpn_client' has both left- and
rightsourceip, but IKE can ne gotiate
one virtual IP only, ignoring local virtual IP<o:p id="yui_3_16_0_ym19_1_1461318233421_5487"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5488"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5489">12[CFG] added configuration 'vpn_server-vpn_client'<o:p id="yui_3_16_0_ym19_1_1461318233421_5490"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5491"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5492">11[NET] received packet: from 192.168.10.59[59887] to
10.0.131.40[500] (1012 byt
es)<o:p id="yui_3_16_0_ym19_1_1461318233421_5493"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5494"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5495">11[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP)
N(NATD_D_IP) N(FRAG
_SUP) N(HASH_ALG) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5496"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5497"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5498">11[IKE] 192.168.10.59 is initiating an IKE_SA<o:p id="yui_3_16_0_ym19_1_1461318233421_5499"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5500"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5501">11[IKE] local host is behind NAT, sending keep alives<o:p id="yui_3_16_0_ym19_1_1461318233421_5502"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5503"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5504">11[IKE] remote host is behind NAT<o:p id="yui_3_16_0_ym19_1_1461318233421_5505"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5506"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5507">11[IKE] DH group MODP_2048 inacceptable, requesting MODP_3072<o:p id="yui_3_16_0_ym19_1_1461318233421_5508"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5509"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5510">11[ENC] generating IKE_SA_INIT response 0 [ N(INVAL_KE) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5511"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5512"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5513">11[NET] sending packet: from 10.0.131.40[500] to
192.168.10.59[59887] (38 bytes)<o:p id="yui_3_16_0_ym19_1_1461318233421_5514"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5515"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5516">11[NET] received packet: from 192.168.10.59[59888] to
10.0.131.40[500] (1012 byt
es)<o:p id="yui_3_16_0_ym19_1_1461318233421_5517"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5518"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5519">11[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP)
N(NATD_D_IP) N(FRAG
_SUP) N(HASH_ALG) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5520"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5521"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5522">11[IKE] 192.168.10.59 is initiating an IKE_SA<o:p id="yui_3_16_0_ym19_1_1461318233421_5523"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5524"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5525">11[IKE] local host is behind NAT, sending keep alives<o:p id="yui_3_16_0_ym19_1_1461318233421_5526"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5527"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5528">11[IKE] remote host is behind NAT<o:p id="yui_3_16_0_ym19_1_1461318233421_5529"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5530"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5531">11[IKE] DH group MODP_2048 inacceptable, requesting MODP_3072<o:p id="yui_3_16_0_ym19_1_1461318233421_5532"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5533"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5534">11[ENC] generating IKE_SA_INIT response 0 [ N(INVAL_KE) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5535"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5536"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5537">11[NET] sending packet: from 10.0.131.40[500] to
192.168.10.59[59888] (38 bytes)<o:p id="yui_3_16_0_ym19_1_1461318233421_5538"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5539"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5540">11[NET] received packet: from 192.168.10.59[59888] to
10.0.131.40[500] (1140 byt
es)<o:p id="yui_3_16_0_ym19_1_1461318233421_5541"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5542"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5543">11[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP)
N(NATD_D_IP) N(FRAG
_SUP)
N(HASH_ALG) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5544"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5545"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5546">11[IKE] 192.168.10.59 is initiating an IKE_SA<o:p id="yui_3_16_0_ym19_1_1461318233421_5547"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5548"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5549">11[IKE] local host is behind NAT, sending keep alives<o:p id="yui_3_16_0_ym19_1_1461318233421_5550"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5551"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5552">11[IKE] remote host is behind NAT<o:p id="yui_3_16_0_ym19_1_1461318233421_5553"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5554"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5555">11[ENC] generating IKE_SA_INIT response 0 [ SA KE No
N(NATD_S_IP) N(NATD_D_IP) N
(HASH_ALG) N(MULT_AUTH) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5556"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5557"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5558">11[NET] sending packet: from 10.0.131.40[500] to
192.168.10.59[59888] (584 bytes
)<o:p id="yui_3_16_0_ym19_1_1461318233421_5559"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5560"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5561">13[NET] received packet: from 192.168.10.59[59892] to
10.0.131.40[4500] (3280 by
tes)<o:p id="yui_3_16_0_ym19_1_1461318233421_5562"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5563"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5564">13[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT)
CERTREQ CPRQ(ADDR ADDR6
DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR)
N(MULT_AUTH)
N(EAP_ONLY) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5565"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5566"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5567">13[IKE] received 139 cert requests for an unknown ca<o:p id="yui_3_16_0_ym19_1_1461318233421_5568"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5569"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5570">13[CFG] looking for peer configs matching
10.0.131.40[%any]...192.168.10.59[user
]<o:p id="yui_3_16_0_ym19_1_1461318233421_5571"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5572"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5573">13[CFG] selected peer config 'vpn_server-vpn_client'<o:p id="yui_3_16_0_ym19_1_1461318233421_5574"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5575"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5576">13[IKE] initiating EAP_IDENTITY method (id 0x00)<o:p id="yui_3_16_0_ym19_1_1461318233421_5577"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5578"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5579">13[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using
ESPv3 TFC padding<o:p id="yui_3_16_0_ym19_1_1461318233421_5580"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5581"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5582">13[IKE] peer supports MOBIKE<o:p id="yui_3_16_0_ym19_1_1461318233421_5583"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5584"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5585">13[ENC] generating IKE_AUTH response 1 [ IDr EAP/REQ/ID ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5586"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5587"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5588">13[NET] sending packet: from 10.0.131.40[4500] to
192.168.10.59[59892] (96 bytes
)<o:p id="yui_3_16_0_ym19_1_1461318233421_5589"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5590"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5591">12[NET] received packet: from 192.168.10.59[59892] to
10.0.131.40[4500] (80 byte
s)<o:p id="yui_3_16_0_ym19_1_1461318233421_5592"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5593"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5594">12[ENC] parsed IKE_AUTH request 2 [ EAP/RES/ID ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5595"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5596"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5597">12[IKE] received EAP identity 'user'<o:p id="yui_3_16_0_ym19_1_1461318233421_5598"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5599"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5600">12[IKE] initiating EAP_MD5 method (id 0x12)<o:p id="yui_3_16_0_ym19_1_1461318233421_5601"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5602"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5603">12[ENC] generating IKE_AUTH response 2 [ EAP/REQ/MD5 ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5604"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5605"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5606">12[NET] sending packet: from 10.0.131.40[4500] to
192.168.10.59[59892] (96 bytes )<o:p id="yui_3_16_0_ym19_1_1461318233421_5607"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5608"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5609">09[NET] received packet: from 192.168.10.59[59892] to
10.0.131.40[4500] (96 byte
s)<o:p id="yui_3_16_0_ym19_1_1461318233421_5610"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5611"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5612">09[ENC] parsed IKE_AUTH request 3 [ EAP/RES/MD5 ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5613"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5614"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5615">09[IKE] EAP method EAP_MD5 succeeded, no MSK established<o:p id="yui_3_16_0_ym19_1_1461318233421_5616"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5617"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5618">09[ENC] generating IKE_AUTH response 3 [ EAP/SUCC ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5619"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5620"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5621">09[NET] sending packet: from 10.0.131.40[4500] to
192.168.10.59[59892] (80 bytes
)<o:p id="yui_3_16_0_ym19_1_1461318233421_5622"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5623"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5624">11[NET] received packet: from 192.168.10.59[59892] to
10.0.131.40[4500] (112 byt
es)<o:p id="yui_3_16_0_ym19_1_1461318233421_5625"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5626"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5627">11[ENC] parsed IKE_AUTH request 4 [ AUTH ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5628"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5629"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5630">11[IKE] authentication of 'user' with EAP successful<o:p id="yui_3_16_0_ym19_1_1461318233421_5631"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5632"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5633">11[IKE] authentication of '10.0.131.40' (myself) with EAP<o:p id="yui_3_16_0_ym19_1_1461318233421_5634"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5635"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5636">11[IKE] IKE_SA vpn_server-vpn_client[3] established between
10.0.131.40[10.0.131 .40]...192.168.10.59[user]<o:p id="yui_3_16_0_ym19_1_1461318233421_5637"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5638"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5639">11[IKE] peer requested virtual IP %any<o:p id="yui_3_16_0_ym19_1_1461318233421_5640"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5641"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5642">11[CFG] assigning new lease to 'user'<o:p id="yui_3_16_0_ym19_1_1461318233421_5643"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5644"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5645">11[IKE] assigning virtual IP 10.0.2.15 to peer 'user'<o:p id="yui_3_16_0_ym19_1_1461318233421_5646"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5647"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5648">11[IKE] peer requested virtual IP %any6<o:p id="yui_3_16_0_ym19_1_1461318233421_5649"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5650"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5651">11[IKE] no virtual IP found for %any6 requested by 'user'<o:p id="yui_3_16_0_ym19_1_1461318233421_5652"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5653"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5654">11[IKE] CHILD_SA vpn_server-vpn_client{1} established with
SPIs 1a10e953_i e5c90
1c2_o and TS 0.0.0.0/0[icmp] === 10.0.2.15/32[icmp]<o:p id="yui_3_16_0_ym19_1_1461318233421_5655"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5656"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5657">11[ENC] generating IKE_AUTH response 4 [ AUTH CPRP(ADDR) SA
TSi TSr N(MOBIKE_SUP
) N(NO_ADD_ADDR) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5658"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5659"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5660">11[NET] sending packet: from 10.0.131.40[4500] to
192.168.10.59[59892] (240 byte
s)<o:p id="yui_3_16_0_ym19_1_1461318233421_5661"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5662"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5663">14[NET] received packet: from 192.168.10.59[59892] to
10.0.131.40[4500] (80 byte
s)<o:p id="yui_3_16_0_ym19_1_1461318233421_5664"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5665"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5666">14[ENC] parsed INFORMATIONAL request 5 [ N(AUTH_FAILED) ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5667"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5668"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5669">14[IKE] received DELETE for IKE_SA vpn_server-vpn_client[3]<o:p id="yui_3_16_0_ym19_1_1461318233421_5670"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5671"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5672">14[IKE] deleting IKE_SA vpn_server-vpn_client[3] between
10.0.131.40[10.0.131.40
]...192.168.10.59[user]<o:p id="yui_3_16_0_ym19_1_1461318233421_5673"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5674"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5675">14[IKE] IKE_SA deleted<o:p id="yui_3_16_0_ym19_1_1461318233421_5676"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5677"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5678">14[ENC] generating INFORMATIONAL response 5 [ ]<o:p id="yui_3_16_0_ym19_1_1461318233421_5679"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5680"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5681">14[NET] sending packet: from 10.0.131.40[4500] to 192.168.10.59[59892]
(80 bytes
)<o:p id="yui_3_16_0_ym19_1_1461318233421_5682"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5683"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5684"><o:p id="yui_3_16_0_ym19_1_1461318233421_5685"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5686"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5687"><o:p id="yui_3_16_0_ym19_1_1461318233421_5688"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5689"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5690">Here is the ipsec.conf, ipsec.secet used at Server end.<o:p id="yui_3_16_0_ym19_1_1461318233421_5691"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5692"><b><u><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5692"><b id="yui_3_16_0_ym19_1_1461318233421_5693"><u id="yui_3_16_0_ym19_1_1461318233421_5694"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5695">ipsec.conf<o:p id="yui_3_16_0_ym19_1_1461318233421_5696"></o:p></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5697"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5697"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5698">config setup<o:p id="yui_3_16_0_ym19_1_1461318233421_5699"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5700"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5701">conn %default<o:p id="yui_3_16_0_ym19_1_1461318233421_5702"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5703"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5704"> ikelifetime=60m<o:p id="yui_3_16_0_ym19_1_1461318233421_5705"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5706"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5707"> keylife=20m<o:p id="yui_3_16_0_ym19_1_1461318233421_5708"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5709"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5710"> rekeymargin=3m<o:p id="yui_3_16_0_ym19_1_1461318233421_5711"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5712"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5713"> keyingtries=1<o:p id="yui_3_16_0_ym19_1_1461318233421_5714"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5715"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5716"><o:p id="yui_3_16_0_ym19_1_1461318233421_5717"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5718"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5719">conn vpn_server-vpn_client<o:p id="yui_3_16_0_ym19_1_1461318233421_5720"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5718"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5721"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5722">
left=10.0.131.40<o:p id="yui_3_16_0_ym19_1_1461318233421_5723"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5724"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5725">
leftfirewall=yes<o:p id="yui_3_16_0_ym19_1_1461318233421_5726"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5727"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5728"> leftsubnet =
%any<o:p id="yui_3_16_0_ym19_1_1461318233421_5729"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5730"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5731"> leftprotoport=1<o:p id="yui_3_16_0_ym19_1_1461318233421_5732"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5733"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5734"> rightprotoport=1<o:p id="yui_3_16_0_ym19_1_1461318233421_5735"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5736"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5737"> right=%any<o:p id="yui_3_16_0_ym19_1_1461318233421_5738"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5739"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5740"> rightauth=eap-md5<o:p id="yui_3_16_0_ym19_1_1461318233421_5741"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5742"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5743"> rightsendcert=never<o:p id="yui_3_16_0_ym19_1_1461318233421_5744"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5745"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5746"> leftauth=eap-md5<o:p id="yui_3_16_0_ym19_1_1461318233421_5747"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5748"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5749">
eap_identity=%any<o:p id="yui_3_16_0_ym19_1_1461318233421_5750"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5751"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5752">
leftsubnet=0.0.0.0/0<o:p id="yui_3_16_0_ym19_1_1461318233421_5753"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5754"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5755"> rightsourceip =
10.0.2.15/32<o:p id="yui_3_16_0_ym19_1_1461318233421_5756"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5757"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5758"> type=tunnel<o:p id="yui_3_16_0_ym19_1_1461318233421_5759"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5760"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5761">
keyexchange=ikev2<o:p id="yui_3_16_0_ym19_1_1461318233421_5762"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5763"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5764"> esp=aes128-sha1<o:p id="yui_3_16_0_ym19_1_1461318233421_5765"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5766"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5767"> rekey=no<o:p id="yui_3_16_0_ym19_1_1461318233421_5768"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5769"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5770"> reauth=no<o:p id="yui_3_16_0_ym19_1_1461318233421_5771"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5772"><b><u><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5772"><b id="yui_3_16_0_ym19_1_1461318233421_5773"><u id="yui_3_16_0_ym19_1_1461318233421_5774"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5775">ipsec.secrets<o:p id="yui_3_16_0_ym19_1_1461318233421_5776"></o:p></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5772"><b><u><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5777"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5778">user : EAP "strongSwan"<o:p id="yui_3_16_0_ym19_1_1461318233421_5779"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5780"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5781"><o:p id="yui_3_16_0_ym19_1_1461318233421_5782"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5783"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5784"><o:p id="yui_3_16_0_ym19_1_1461318233421_5785"> </o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5786"><b id="yui_3_16_0_ym19_1_1461318233421_5787"><u id="yui_3_16_0_ym19_1_1461318233421_5788"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5789">VPN profile
used at android device<o:p id="yui_3_16_0_ym19_1_1461318233421_5790"></o:p></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5786"><b><u><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%"><br></span></u></b></div><div id="yui_3_16_0_ym19_1_1461318233421_5791"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5792">Gateway: 172.19.134.4<o:p id="yui_3_16_0_ym19_1_1461318233421_5793"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5794"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5795">Type: IKEv2 EAP (Username/Password) <o:p id="yui_3_16_0_ym19_1_1461318233421_5796"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5797"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5798">Username: user<o:p id="yui_3_16_0_ym19_1_1461318233421_5799"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_5800"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%" id="yui_3_16_0_ym19_1_1461318233421_5801">Password: strongSwan<o:p id="yui_3_16_0_ym19_1_1461318233421_5802"></o:p></span></div><div id="yui_3_16_0_ym19_1_1461318233421_4661" dir="ltr">
<span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";mso-ascii-theme-font:minor-latin;mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:"Times New Roman";mso-bidi-theme-font:minor-bidi;mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA" id="yui_3_16_0_ym19_1_1461318233421_5803">CA
certificate: Select automatically (the default)</span><br></div><div id="yui_3_16_0_ym19_1_1461318233421_4661" dir="ltr"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";mso-ascii-theme-font:minor-latin;mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:"Times New Roman";mso-bidi-theme-font:minor-bidi;mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA"><br></span></div><div id="yui_3_16_0_ym19_1_1461318233421_4661" dir="ltr"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";mso-ascii-theme-font:minor-latin;mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:"Times New Roman";mso-bidi-theme-font:minor-bidi;mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA"><br></span></div><div id="yui_3_16_0_ym19_1_1461318233421_4661" dir="ltr"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";mso-ascii-theme-font:minor-latin;mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:"Times New Roman";mso-bidi-theme-font:minor-bidi;mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">Regards,</span></div><div id="yui_3_16_0_ym19_1_1461318233421_4661" dir="ltr"><span style="font-size:12.0pt;mso-bidi-font-size:11.0pt;line-height:115%;font-family:"Calibri","sans-serif";mso-ascii-theme-font:minor-latin;mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;mso-hansi-theme-font:minor-latin;mso-bidi-font-family:"Times New Roman";mso-bidi-theme-font:minor-bidi;mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">Chinmaya</span></div></div></body></html>