<!DOCTYPE html>
<html>
<head>
<title></title>
<style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style>
</head>
<body><div><br></div>
<div>On Sat, Feb 16, 2019, at 10:09 AM, Rudi Barnard wrote:<br></div>
<blockquote type="cite"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-family:verdana, sans-serif;font-size:small;">Hi,<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;"><br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Have been using openswan on Ubuntu 14.04 on AWS EC2 for site to site connections (Ikev1 + PSK).<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Recently upgraded an image of the Ubuntu EC2 instance from 14.04 to 18.04.<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Result is that openswan gets replaced with Strongswan. I eventually did a scratch install of strongswan and also installed the Cisco plugin for multiple subnet support.<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;"><br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Now testing one of the MANY VPNs we have previously setup on openswan.<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Tunnels are up but ip xfrm policy / state shows no entry and therefore I assume that there is config issue.<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;"><br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Very new with Strongswan so not sure where to start troubleshooting.<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;"><br></div>
<div style="font-family:verdana, sans-serif;font-size:small;">Thanks.<br></div>
<div style="font-family:verdana, sans-serif;font-size:small;"><br></div>
<div><div style="font-family:verdana, sans-serif;font-size:small;">[snip]<span class="font" style="font-family:verdana, " sans-serif""></span><br></div>
<div><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><br></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote><div><br></div>
<div>I'm a newbie too, but ... anything interesting in the logs?<br></div>
<div><br></div>
<div>journalctl -f -u strongswan<br></div>
<div><br></div>
<div>And then force a reconnect from a client.</div>
<div><br></div>
<div>---<br></div>
<div><br></div>
<div>By the way, this is like a plague that gets copied from tutorial to tutorial:<br></div>
<div><br></div>
<div> charondebug="ike 1, knl 1, cfg 0"<br></div>
<div><br></div>
<div>You may want to set "cfg" log level to 1 or even 2 (and the others too) for troubleshooting.<br></div>
<div><br></div>
<div>-- K<br></div>
<div><br></div>
</body>
</html>