<div style="font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; color:#000000"><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Hi Folks,I’m trying to setup an IPsec connection between my mobile devices</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">(smartphone, Tablet, Notebook) and my root server.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Unfortunately I’m failing to do so.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">I’ve read a lot of tutorials including the strongswan wiki tutorials but</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">I’m still failing to connect.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">My Goal is it to set up an IPsec IKEv2 with client certificates and</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Credentials.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">I have absolutely no idea what wrong… please help me out guys.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Thanks :-)</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Server IP:</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">40.30.20.10</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Server FQDN:</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">vpn.example.org</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Client IP:</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">50.60.70.80</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">ipsec --version</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Linux strongSwan U5.2.1/K3.16.0-4-amd64</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Institute for Internet Technologies and Applications</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">University of Applied Sciences Rapperswil, Switzerland</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">See 'ipsec --copyright' for copyright information.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">/etc/ipsec.conf</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># ipsec.conf - strongSwan IPsec configuration file</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">config setup</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         # uniqueids=never</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         charondebug=&cfg 2, dmn 2, ike 2, net 2&</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">conn %default</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         keyexchange=ikev2</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">        </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">ike=aes128-sha256-ecp256,aes256-sha384-ecp384,aes128-sha256-modp2048,aes128-sha1-modp2048,aes256-sha384-modp4096,aes256-sha256-modp4096,aes256-sha1-modp4096,aes128-sha256-modp1536,aes128-sha1-modp1536,aes256-sha384-modp2048,aes256-sha256-modp2048,aes256-sha1-modp2048,aes128-sha256-modp1024,aes128-sha1-modp1024,aes256-sha384-modp1536,aes256-sha256-modp1536,aes256-sha1-modp1536,aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha1-modp1024!</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">        </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">esp=aes128gcm16-ecp256,aes256gcm16-ecp384,aes128-sha256-ecp256,aes256-sha384-ecp384,aes128-sha256-modp2048,aes128-sha1-modp2048,aes256-sha384-modp4096,aes256-sha256-modp4096,aes256-sha1-modp4096,aes128-sha256-modp1536,aes128-sha1-modp1536,aes256-sha384-modp2048,aes256-sha256-modp2048,aes256-sha1-modp2048,aes128-sha256-modp1024,aes128-sha1-modp1024,aes256-sha384-modp1536,aes256-sha256-modp1536,aes256-sha1-modp1536,aes256-sha384-modp1024,aes256-sha256-modp1024,aes256-sha1-modp1024,aes128gcm16,aes256gcm16,aes128-sha256,aes128-sha1,aes256-sha384,aes256-sha256,aes256-sha1!</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         dpdaction=clear</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         dpddelay=300s</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rekey=no</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         left=%any</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         leftsubnet=0.0.0.0/0</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         #leftcert=vpnHostCert.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         right=%any</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rightdns=</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">8.8.8.8</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">,</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">8.8.4.4</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rightsourceip=</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">172.16.16.0/24</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">conn IPSec-IKEv2</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         keyexchange=ikev2</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         auto=add</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">conn IPSec-IKEv2-EAP</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         also=&IPSec-IKEv2&</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rightauth=eap-mschapv2</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rightsendcert=never</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         eap_identity=%any</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">conn TLS</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         also=&IPSec-IKEv2&</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rightauth=eap-tls</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         rightauth2=eap-mschapv2</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         eap_identity=%any</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">cat /etc/ipsec.secrets</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># This file holds shared secrets or RSA private keys for authentication.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># RSA private key for this host, authenticating it to any other host</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># which knows the public part.  Suitable public keys, for ipsec.conf,</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">DNS,</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># or configuration of other implementations, can be extracted</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">conveniently</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># with &ipsec showhostkey&.</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">: RSA vpnHostKey.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">user1 : EAP &test123&</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">cat /etc/strongswan.conf</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># strongswan.conf - strongSwan configuration file</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">#</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># Refer to the strongswan.conf(5) manpage for details</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">#</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"># Configuration changes should be made in the included files</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">charon {</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">     filelog {</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         /var/log/charon.log {</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             # add a timestamp prefix</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             time_format = %b %e %T</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             # prepend connection name, simplifies grepping</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             ike_name = yes</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             # overwrite existing files</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             append = no</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             # increase default loglevel for all daemon subsystems</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             default = 2</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             # flush each line to disk</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             flush_line = yes</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         }</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">     }</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         load_modular = yes</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         plugins {</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             eap-tls {</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">                 fragment_size = 512</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">             }</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         include strongswan.d/charon/*.conf</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">         }</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">}</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">IPTables</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -t nat -A POSTROUTING -o eth0 ! -p esp -j SNAT --to-source</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">40.30.20.10</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A INPUT -p udp --dport 500 --j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A INPUT -p udp --dport 4500 --j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A INPUT -p esp -j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A INPUT -p ah -j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A FORWARD -p esp -j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A FORWARD -p ah -j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">iptables -A FORWARD -p udp --sport 500 --dport 500 -j ACCEPT</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">CA certificate</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl genrsa -aes256 -out private/ca.key.pem 8192</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl req -key private/ca.key.pem -new -x509 -days 1827 -sha256</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">-extensions v3_ca -out certs/ca.cert.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">VPN-Server certificate</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl genrsa -out private/srv.key.pem 4096</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl req -key private/srv.key.pem -new -sha256 -out csr/srv.csr.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl ca -extensions vpn_server_cert -days 365 -notext -md sha256 -in</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">csr/srv.csr.pem -out certs/srv.cert.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Client certificate</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl genrsa -out private/max.key.pem 4096</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl req -key private/max.key.pem -new -sha256 -out csr/max.csr.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">openssl ca -extensions vpn_usr_cert -days 365 -notext -md sha256 -in</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> </span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">csr/max.csr.pem -out certs/max.cert.pem</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">/etc/ssl/openssl.cnf</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">http://pastebin.com/xnThD6bR</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">LOG</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Startup</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">http://pastebin.com/h9gUActY</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">Connection attempt</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNIP =========================</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;"> http://pastebin.com/dqjS2Gm1</span></p><p style="line-height: 115%; margin: 0pt 0pt 10pt; text-indent: 0pt;"><span dir="LTR" style="font-family: Calibri; font-size: 11pt; vertical-align: baseline; background-image: none; text-shadow: none; background-position: initial initial; background-repeat: initial initial;">========================= SNAP =========================</span></p><p></p><div id="signature-x" style="-webkit-user-select:none; font-family:Calibri, Arial, Helvetica, sans-serif; font-size:12.0pt; color:#000000">Sent from <a href="http://www.9folders.com/" style="text-decoration:none;color:#009BDF">Nine</a></div></div>