<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">You can see the log messages in /var/log/syslog. You can configure the logging further to create custom logs [1]<div class=""><br class=""></div><div class="">For no proposal, you should set CFG to 3</div><div class=""><br class=""></div><div class="">My config looks like the following</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">$ /etc/strongswan.d/charon-systemd.conf </span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">charon-systemd {</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> filelog {</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> /var/log/strongswan.log {</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> time_format = %b %e %T</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> flush_line = yes</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> default = -1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> cfg = 5</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> }</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> }</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">}</span></div></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span style="font-family: Helvetica; font-size: 12px;" class="">And don’t forget to handle log rotation</span><br style="font-family: Helvetica; font-size: 12px;" class=""></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><br class=""></div><div style="margin: 0px; font-stretch: normal; line-height: normal; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures; font-size: 11px;" class=""><font face="Menlo" class=""><div style="margin: 0px; font-stretch: normal; line-height: normal;" class="">$ /etc/logrotate.d/strongswan</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class="">/var/log/strongswan.log</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class="">{</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> su root adm</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> rotate 4</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> daily</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> missingok</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> notifempty</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> compress</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> delaycompress</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""> copytruncate</div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class="">}</div></font></span></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">[1] <a href="https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration" class="">https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration</a></div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 3 May 2018, at 00:49, Naveen Neelakanta <<a href="mailto:naveen.b.neelakanta@gmail.com" class="">naveen.b.neelakanta@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hi Noel, <div class=""><br class=""></div><div class="">I am using the vici plugin to handle the events and configure the tunnels, however in case of errors like the "no proposal " or auth failure, can this information be retrieved from vici messages .</div><div class=""><br class=""></div><div class="">That will help a lot for debugging, if this is already present please point me to the information, Appreciate your response. </div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Naveen</div></div>
</div></blockquote></div><br class=""></div></body></html>