<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi All, <br>
</p>
<p>We are able to connect to StrongSwan IPSec using LAN IP. But in
the same system which is having Public IP with NAT trying to
connect it says one connecting only. Connection could not
establish. <br>
</p>
<p>Someone can please help me in solving this. <br>
</p>
<p><br>
</p>
<p><img src="cid:part1.F0BBEBAE.D0ECE308@mindlogicx.com" alt=""
width="1040" height="283"></p>
<p>Thanks & Regards<br>
</p>
<div class="moz-signature"><br>
<img src="cid:part2.47045C69.01CC0CE0@mindlogicx.com" border="0"></div>
<div class="moz-cite-prefix">On Thursday 04 January 2018 07:16 PM,
Noel Kuntze wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1598fca7-25d9-a7c4-3ff8-813d0f4bcaa9@thermi.consulting">
<pre wrap="">Not on openwrt. But you need plaintext or AD like passwords in LDAP. Otherwise you can't auth with mschap(v2).
On 04.01.2018 14:38, Giuseppe De Marco wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Yes Noel and thank you, my question is:
Is there any experiences about running strongswan in openwrt as ikev2 server with mschap,radius,ldap auth backend?
2018-01-04 14:17 GMT+01:00 Noel Kuntze <<a class="moz-txt-link-abbreviated" href="mailto:noel.kuntze+strongswan-users-ml@thermi.consulting">noel.kuntze+strongswan-users-ml@thermi.consulting</a> <a class="moz-txt-link-rfc2396E" href="mailto:noel.kuntze+strongswan-users-ml@thermi.consulting"><mailto:noel.kuntze+strongswan-users-ml@thermi.consulting></a>>:
Hi,
`ipsec` is just a command line tool. It's not a daemon (or generally a service).
Are there any open questions?
Kind regards
Noel
On 04.01.2018 14:14, Giuseppe De Marco wrote:
> Hi and thank you Noel,
> I meant to run ipsec and charon in the embedded openwrt router, I use dpd as well
>
> # dead-peer detection to clear any "dangling" connections in case the client unexpectedly disconnects
> dpdaction=clear
> # If the tunnel has no traffic for this long (default 30 secs), Charon will send a dead peer detection packet. The value 0 means to not send such packets, relying on ordinary traffic, which will occur at least once an hour, which is the default rekeying lifetime.
> dpddelay=33s
> # DPD Retries : 3
> dpdtimeout=300s
>
> Running strongswan in a 18-70$ openwrt router is very usefull in many way
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
</body>
</html>