<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hey everyone,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have a laptop tethered via my phone, Ubuntu 18.4. I am unable to establish a connection and none of my research has thus far revealed anything helpful. Please review the below and advise. Other proprietary clients are able to connect
without issue.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have an ipsec.conf file which looks like:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">conn officeVPN<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> aggressive=yes<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> type=tunnel <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> authby=secret<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> keyexchange=ikev1<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> ike=aes128-sha1-modp2048<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> esp= aes256-sha256-modp2048<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> mobike=no<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> left=%defaultroute <o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> leftsourceip=%config<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> modeconfig=push<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> leftprotoport=udp/l2tp <o:p>
</o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> right= 50.45.0.51<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> rightprotoport=udp/l2tp <o:p>
</o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> righted=10.0.0.254<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> auto=add<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt"> xauth_identity=user<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">An ipsec.secrets that looks like:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">50.45.0.51 %any : PSK "StrongKey-Honest!"<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">user %any : XAUTH “password”<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">An /etc/strongswan.conf that has the following line:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">i_dont_care_about_security_and_use_aggressive_mode_psk=yes<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Then the ipsec up officeVPN command is run:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">$ sudo ipsec up officeVPN<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">initiating Aggressive Mode IKE_SA officeVPN[1] to 50.54.0.51<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[500] to 50.54.0.51[500] (548 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received packet: from 50.54.0.51[500] to 1.0.0.127[500] (564 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">parsed AGGRESSIVE response 0 [ SA KE No ID HASH V NAT-D NAT-D V V V V V ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received NAT-T (RFC 3947) vendor ID<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received DPD vendor ID<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received XAuth vendor ID<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received unknown vendor ID: 00:00:00:00:00:00:00:00:00:08:00:00:00:00:00:00<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received FRAGMENTATION vendor ID<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received FRAGMENTATION vendor ID<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">local host is behind NAT, sending keep alives<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">remote host is behind NAT<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">IKE_SA officeVPN[1] established between 1.0.0.127[1.0.0.127]… 50.54.0.51[10.0.0.254]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">scheduling reauthentication in 9761s<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">maximum IKE_SA lifetime 10301s<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">generating AGGRESSIVE request 0 [ HASH NAT-D ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[4500] to 50.54.0.51[4500] (108 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received packet: from 50.54.0.51[4500] to 1.0.0.127[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">generating TRANSACTION response 890044400 [ HASH CP ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[4500] to 50.54.0.51[4500] (76 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received packet: from 50.54.0.51[500] to 1.0.0.127[500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">parsed INFORMATIONAL_V1 request 4321098765 [ HASH N(DPD) ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">generating INFORMATIONAL_V1 request 0987654321 [ HASH N(DPD_ACK) ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[4500] to 50.54.0.51[4500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received packet: from 50.54.0.51[500] to 1.0.0.127[500] (92 bytes)
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">parsed INFORMATIONAL_V1 request 7654321098 [ HASH N(DPD) ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">generating INFORMATIONAL_V1 request 2109876543 [ HASH N(DPD_ACK) ]
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[4500] to 50.54.0.51[4500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">received packet: from 50.54.0.51[500] to 1.0.0.127[500] (92 bytes)
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">parsed INFORMATIONAL_V1 request 3210987654 [ HASH N(DPD) ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">generating INFORMATIONAL_V1 request 6543210987 [ HASH N(DPD_ACK) ]
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[4500] to 50.54.0.51[4500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]
<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending keep alive to 50.54.0.51[4500]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">deleting IKE_SA officeVPN[1] between 1.0.0.127[1.0.0.127]… 50.54.0.51[10.0.0.254]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending DELETE for IKE_SA officeVPN[1]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">parsed INFORMATIONAL_V1 request 5432109876 [ HASH D ]<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">sending packet: from 1.0.0.127[4500] to 50.54.0.51[4500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:36.0pt">establishing connection ‘officeVPN’ failed<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#1F497D;mso-fareast-language:EN-GB">--<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#1F497D;mso-fareast-language:EN-GB">Stephen Feyrer</span></b><b><span style="color:#1F497D;mso-fareast-language:EN-GB"><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#A6A6A6;mso-fareast-language:EN-GB">DevOps Engineer</span><span style="color:#1F497D;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#A6A6A6;mso-fareast-language:EN-GB">Greensill Capital<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#A6A6A6;mso-fareast-language:EN-GB"><a href="mailto:stephen.feyrer@greensill.com"><span style="color:#0563C1">stephen.feyrer@greensill.com</span></a></span><span style="color:#1F497D;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;color:#A6A6A6;mso-fareast-language:EN-GB"><a href="http://www.greensill.com"><span style="color:#0563C1">http://www.greensill.com</span></a>
<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p style="font-size:6pt; font-family: 'Cambria','times roman',serif;">This message is for the designated recipient only and may contain privileged, proprietary or otherwise confidential information. If you have received this in error, please contact the sender
immediately and delete the original. Any other use of this e-mail by you is prohibited. If we collect and use your personal data we will use it in accordance with our
<a href="http://www.greensill.com/privacy/">privacy policy</a>. Greensill Capital (UK) Limited. Registered in England and Wales. Registered Number: 8126173. Registered Office: One Southampton Street, Covent Garden, London, WC2R 0LR, United Kingdom. Greensill
Capital Pty Limited. Australian Company Number: 154 088 132. Registered Office: 62 –66 Woondooma Street, Bundaberg, Queensland 4670, Australia.</p>
<br>
</body>
</html>