<div dir="ltr">I tried ikev1 and the tunnel got established. <div>Noel, I removed the leftsourceip line, it will not establish the tunnel.</div><div><br></div><div>Now I have some routing issues as I am not able to ping the remote.</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature">-maqbool</div></div>
<br><div class="gmail_quote">On Tue, Feb 14, 2017 at 11:10 AM, Noel Kuntze <span dir="ltr"><<a href="mailto:noel@familie-kuntze.de" target="_blank">noel@familie-kuntze.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Maqbool,<br>
<br>
>     leftsourceip=10.0.0.33<br>
<br>
Remove that. Then retry.<br>
<br>
And use auto=route instead of auto=start.<br>
See the article about security recommendations[1] for reasons why<br>
and opportunities to significantly improve in your setup.<br>
<br>
[1] <a href="https://wiki.strongswan.org/projects/strongswan/wiki/SecurityRecommendations" rel="noreferrer" target="_blank">https://wiki.strongswan.org/<wbr>projects/strongswan/wiki/<wbr>SecurityRecommendations</a><br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
<br>
Mit freundlichen Grüßen/Kind Regards,<br>
Noel Kuntze<br>
<br>
GPG Key ID: 0x63EC6658<br>
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658<br>
<br>
<br>
</font></span></blockquote></div><br></div>