<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-CA link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal>I am setup a site to site vpn to one my vendors they have Cisco ASA ios 9.x</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>They gave me a sample of config file but its not send any traffic to them</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Here is what I have</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>config setup</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>conn vpn_tunnel</p><p class=MsoNormal> compress=no</p><p class=MsoNormal> type=tunnel</p><p class=MsoNormal> authby=secret</p><p class=MsoNormal> forceencaps=yes</p><p class=MsoNormal> auto=start</p><p class=MsoNormal> rekey=yes<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> ikelifetime=28800s</p><p class=MsoNormal> keylife=3600s</p><p class=MsoNormal> rekeymargin=3m</p><p class=MsoNormal> keyingtries=1</p><p class=MsoNormal> keyexchange=ike</p><p class=MsoNormal> authby=secret</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal># conn ciscoios</p><p class=MsoNormal> left=192.168.x.x</p><p class=MsoNormal> leftsubnet=192.168.x.x/32 #network behind strongswan</p><p class=MsoNormal> leftid=23.xxx.xxx.175 #IKEID sent by strongswan</p><p class=MsoNormal> leftfirewall=yes</p><p class=MsoNormal> right=206.xxxx.xxx.134 #IOS outside address</p><p class=MsoNormal> rightsubnet=206.xxx.xxx.161/32 #network behind IOS</p><p class=MsoNormal> rightid=206.xxx.xxx.134 #IKEID sent by IOS</p><p class=MsoNormal> auto=add</p><p class=MsoNormal> ike=aes256-sha1-modp1024</p><p class=MsoNormal> esp=aes128-sha1 #P2</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>What might I be missing here is the ipsec status </p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Status of IKE charon daemon (strongSwan 5.6.2, Linux 4.15.0-1025-azure, x86_64):</p><p class=MsoNormal> uptime: 2 minutes, since Oct 25 13:24:22 2018</p><p class=MsoNormal> malloc: sbrk 1482752, mmap 0, used 465360, free 1017392</p><p class=MsoNormal> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 0</p><p class=MsoNormal> loaded plugins: charon aesni aes rc2 sha2 sha1 md4 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm attr kernel-netlink resolve socket-default connmark stroke updown eap-mschapv2 xauth-generic counters</p><p class=MsoNormal>Listening IP addresses:</p><p class=MsoNormal>192.168.x.x</p><p class=MsoNormal>Connections:</p><p class=MsoNormal> vpn_tunnel: 192.168.x.x...206.xxx.xxx.134 IKEv1/2</p><p class=MsoNormal> vpn_tunnel: local: [23.xx.xxx.175] uses pre-shared key authentication</p><p class=MsoNormal> vpn_tunnel: remote: [206.xxx.xx.134] uses pre-shared key authentication</p><p class=MsoNormal> vpn_tunnel: child: 172.xxx.xxx.4/32 === 206.xxx.xxxx.161/32 TUNNEL</p><p class=MsoNormal>Security Associations (0 up, 0 connecting):</p><p class=MsoNormal> None</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>And finally here my secrets file</p><p class=MsoNormal>23.xxx.xxx.175 : PSK "MyBigSecert key"</p><p class=MsoNormal>206.xxx.xxxx.161 : PSK " MyBigSecert key "</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Sent from <a href="https://go.microsoft.com/fwlink/?LinkId=550986">Mail</a> for Windows 10</p><p class=MsoNormal><o:p> </o:p></p></div></body></html>