<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Thanks Tobias.
<div class=""><br class="">
</div>
<div class="">That make sense a lot.</div>
<div class=""><br class="">
</div>
<div class="">Here is another question.</div>
<div class=""><br class="">
</div>
<div class="">If I split these into</div>
<div class=""><br class="">
</div>
<div class=""><span style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px;" class=""><br class="">
</span></div>
<div class=""><span style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px;" class="">Server side ( IP address is 10.6.3.187)</span></div>
<div class=""><span style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px;" class="">conn tcp_4001</span></div>
<div class="" style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;">
<span class="" style="font-variant-ligatures: no-common-ligatures;"> leftsubnet=0.0.0.0/0[6/4001]</span></div>
<div class="">
<div class=""><span style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px;" class="">conn udp_4001</span></div>
<div class="" style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;">
<span class="" style="font-variant-ligatures: no-common-ligatures;"> leftsubnet=0.0.0.0/0[17/4001]</span></div>
</div>
<div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class="">
</span></div>
<div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;">Client side </span><span style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px;" class=""> (</span><span style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px;" class="">IP
address is 10.6.3.188)</span></div>
<div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;">
<div style="margin: 0px; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(196, 199, 196); background-color: rgb(39, 41, 44);" class="">
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class=""><br class="">
</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class="">conn 4.10-6-3-187.32.6.4001</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class=""> esp=sha1-aes256</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class=""> rightsubnet=10.6.3.187/32[6/4001]</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class="">conn 4.10-6-3-187.32.17.4001</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class=""> esp=sha1-aes256</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class=""> rightsubnet=10.6.3.187/32[17/4001]</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<span style="font-variant-ligatures: no-common-ligatures" class=""><br class="">
</span></div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
<br class="">
</div>
<div style="margin: 0px; line-height: normal; color: rgb(96, 96, 95); background-color: rgb(255, 255, 255);" class="">
And if I do udp iperf3 testing on port 4001, from client to server</div>
</div>
</span></div>
<div class=""><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class="">
</span></div>
<div class="">Somehow the all the SA is up and TCP control packets flows but not the UDP data traffic.</div>
<div class=""><br class="">
</div>
<div class="">Is there a known issue with this configuration with certain kernel that you are aware of?</div>
<div class=""><br class="">
</div>
<div class="">I am using CentOS 6.6</div>
<div class=""><br class="">
</div>
<div class="">Thanks.</div>
<div class="">
<div class="" style="color: rgb(96, 96, 95); font-family: Menlo; font-size: 11px; margin: 0px; line-height: normal;">
<span class="" style="font-variant-ligatures: no-common-ligatures;">
<div class="" style="margin: 0px; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class="">
</span></div>
</span></div>
<div>
<blockquote type="cite" class="">
<div class="">On Aug 7, 2017, at 2:26 AM, Tobias Brunner <<a href="mailto:tobias@strongswan.org" class="">tobias@strongswan.org</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Hi Jaehong,<br class="">
<br class="">
<blockquote type="cite" class="">This is the charon.log with debug level 2, when the problem happens.<br class="">
At the end of selecting ts for us, it picks tcp_udp_4001 instead of<br class="">
selecting icmp_any.<br class="">
Is this a bug?<br class="">
</blockquote>
<br class="">
Not really. The tcp_udp_4001 connection allows any protocol, so when<br class="">
the peer proposes ICMP that's perfectly acceptable. The port 4001 is<br class="">
interpreted as ICMP type and code in the upper and lower bytes, i.e. 15<br class="">
and 161, respectively. And this type of narrowing is perfectly fine.<br class="">
<br class="">
Regards,<br class="">
Tobias<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>