<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Sujoy,<br>
<br>
It is really hard to help you if don't give us full information
only sending us one picture at a time. Please use test files, they
are easier to navigate than screen shots. Your last question below
is a repeat to a question that I answered before. If you want
proper diagnose of the problem please send the configuration
files,logs, routing table at both ends. see 8 at:<br>
<br>
<a class="moz-txt-link-freetext" href="https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests">https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests</a><br>
<br>
Make sure to increase the debug level in your ipsec.conf files at
both ends, something like: <br>
<br>
config setup<br>
charondebug="ike 3, net 3, mgr 3, esp 3, chd 3, dmn 3, cfg 3,
knl 3"<br>
<br>
<br>
Regards,<br>
Jafar<br>
<br>
<br>
<div class="moz-cite-prefix">On 2/20/2018 8:00 AM, Sujoy wrote:<br>
</div>
<blockquote type="cite"
cite="mid:7d5e26aa-bfa5-06b8-f1fa-fed98d8440e3@mindlogicx.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
Hi Jafar,<br>
<br>
I am able to establish tunnel when I try to connect from LAN IP.
But with same configuration(Firewall setting) and same OS version
it failed to establish tunnel with <b>nated public IP</b>. <br>
<br>
What means parsed "failed to establish CHILD_SA, keeping IKE_SA".
Please let me know if you have any idea regarding this issue. <br>
</blockquote>
<br>
</body>
</html>