<div dir="ltr">Hi Andreas,<div><br></div><div>Looks like the charon process was somehow blocked. I reinstalled the system and the strongswan.</div><div><br></div><div>Thanks,</div><div>Di</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-03-07 20:37 GMT-08:00 Andreas Steffen <span dir="ltr"><<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Di,<br>
<br>
could you provide a log of the daemon's startup which would show what<br>
actually fails? What does "swanctl --stats" or alternatively "ipsec<br>
statusall" show?<br>
<br>
Regards<br>
<br>
Andreas<br>
<span class=""><br>
On 08.03.2017 02:07, 吕迪 wrote:<br>
> Hi Andreas,<br>
><br>
> I tried the default setup, but it's still not binding to port 500. Is<br>
> there any other place I should look at?<br>
><br>
> Thanks,<br>
> Di<br>
><br>
><br>
> 2017-03-07 14:36 GMT-08:00 Andreas Steffen<br>
</span>> <<a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.<wbr>org</a> <mailto:<a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@<wbr>strongswan.org</a>>>:<br>
<div><div class="h5">><br>
> Hi,<br>
><br>
> selecting the --enable-all option is not a good idea. This might<br>
> lead to the loading of conflicting socket plugins preventing the<br>
> charon daemon of starting up at all.<br>
><br>
> Couldn't you just start with the default setup<br>
><br>
> ./configure --prefix=/usr --sysconfdir=/etc<br>
> make<br>
> sudo make install<br>
><br>
> at the outset and enabling additional desired plugins later on?<br>
><br>
> Regards<br>
><br>
> Andreas<br>
><br>
> On 07.03.2017 22:58, 吕迪 wrote:<br>
> > Hi,<br>
> ><br>
> > I tried to compile and install a strongswan on my computer by doing<br>
> ><br>
> >> ./configure --prefix=/usr --sysconfdir=/etc --enable-all<br>
> >> make<br>
> >> sudo make install<br>
> > ,<br>
> > but the charon process is not binding to port 500 for ike when I do<br>
> > "sudo ipsec start".<br>
> ><br>
> > When I run "sudo lsof -i:500 -n -P", nothing shows up.<br>
> ><br>
> > Please give me some help on this, anything l missed or I should<br>
> configure?<br>
> ><br>
> > Thanks,<br>
> > Di<br>
><br>
> ==============================<wbr>==============================<wbr>==========<br>
> Andreas Steffen<br>
</div></div>> <a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.org</a> <mailto:<a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@<wbr>strongswan.org</a>><br>
<span class="">> strongSwan - the Open Source VPN Solution!<br>
</span>> <a href="http://www.strongswan.org" rel="noreferrer" target="_blank">www.strongswan.org</a> <<a href="http://www.strongswan.org" rel="noreferrer" target="_blank">http://www.strongswan.org</a>><br>
<span class="">> Institute for Networked Solutions<br>
> HSR University of Applied Sciences Rapperswil<br>
> CH-8640 Rapperswil (Switzerland)<br>
> ==============================<wbr>=============================[<wbr>INS-HSR]==<br>
><br>
><br>
<br>
</span>--<br>
<div class="HOEnZb"><div class="h5">==============================<wbr>==============================<wbr>==========<br>
Andreas Steffen <a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.org</a><br>
strongSwan - the Open Source VPN Solution! <a href="http://www.strongswan.org" rel="noreferrer" target="_blank">www.strongswan.org</a><br>
Institute for Networked Solutions<br>
HSR University of Applied Sciences Rapperswil<br>
CH-8640 Rapperswil (Switzerland)<br>
==============================<wbr>=============================[<wbr>INS-HSR]==<br>
<br>
</div></div></blockquote></div><br></div>