<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Hi,</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Sorry for not respecting the rules.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">PFA the ipsec.conf, statusall, logs and vpn form.</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Regards</div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><br>------<br><font color="#666666">loyc Cossou</font></div></div><br></div><br><div class="gmail_quote"><div dir="ltr">Le ven. 28 sept. 2018 à 17:53, Noel Kuntze <noel.kuntze+strongswan-users-ml@thermi.consulting> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Loyc,<br>
<br>
The critical information is missing and you do not provide any logs, so we can not help you.<br>
Please follow the advice on the HelpRequests page of the wiki[1].<br>
<br>
Kind regards<br>
<br>
Noel<br>
<br>
[1] <a href="https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests" rel="noreferrer" target="_blank">https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests</a><br>
<br>
Am 22.09.18 um 04:24 schrieb Loyc Cossou:<br>
> Hi,<br>
><br>
> i am new to strongswan but need you help, please.<br>
> I have to etablish a VPN with a client having a Cisco ASA 5585x with HA.<br>
><br>
> Bellow are the details.<br>
><br>
> I have set u^the folowwing code but am unable to put the tunnel up. an you please ztell me how you would write the ipsec.conf? Here is mine:<br>
><br>
> conn %default<br>
>         ikelifetime=24h<br>
>         keylife=8h<br>
>         rekeymargin=3m<br>
>         keyingtries=1<br>
>         keyexchange=ikev2<br>
><br>
> conn Infobip_vpnI<br>
>         leftfirewall=yes<br>
>         authby=secret<br>
>         type=tunnel<br>
>         left=HIDDEN<br>
>         leftid = HIDDEN<br>
>         leftsubnet=HIDDEN<br>
>         leftauth=psk<br>
>         right=HIDDEN<br>
>         rightid=HIDDEN<br>
>         rightsubnet=qi tunet<br>
>         rightauth=psk<br>
>         ikelifetime=24h<br>
>         ike=aes256-sha1!<br>
>         esp=aes256-sha1!<br>
>         lifetime=8h<br>
><br>
> Phase I (IKE Phase):<a href="https://mail.google.com/mail/u/0/#inbox?compose=D" rel="noreferrer" target="_blank">https://mail.google.com/mail/u/0/#inbox?compose=D</a><br>
><br>
> Encryption algorithm<br>
><br>
>       <br>
><br>
> AES256<br>
><br>
> Hash algorithm (Authentication)<br>
><br>
>       <br>
><br>
> SHA-1<br>
><br>
> Diffie-Hellman group<br>
><br>
>       <br>
><br>
> Group 2 (1024 bits)<br>
><br>
> Key lifetime in seconds<br>
><br>
>       <br>
><br>
> 86400<br>
><br>
> Key lifetime in bytes<br>
><br>
>       <br>
><br>
> 0<br>
><br>
>    <br>
><br>
> Phase II (IPSEC Phase):<br>
><br>
> Encryption algorithm<br>
><br>
>       <br>
><br>
> AES256<br>
><br>
> Authentication algorithm<br>
><br>
>       <br>
><br>
> SHA-1<br>
><br>
> Perfect Forward Secrecy (PFS)<br>
><br>
>       <br>
><br>
> No<br>
><br>
> SA duration in seconds (lifetime)<br>
><br>
>       <br>
><br>
> 28800<br>
><br>
> SA duration in KBytes<br>
><br>
>       <br>
><br>
> 4608000<br>
><br>
><br>
><br>
> Please correct me la bas.<br>
><br>
> ------<br>
> loyc Cossou<br>
><br>
><br>
><br>
> Mailtrack <<a href="https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality6&" rel="noreferrer" target="_blank">https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality6&</a>>       Sender notified by<br>
> Mailtrack <<a href="https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality6&" rel="noreferrer" target="_blank">https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality6&</a>> 22/09/18 à 03:20:25   <br>
> /×/REMOVE <#><br>
><br>
<br>
</blockquote></div>