<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Here’s what I use. Definitely works with ikev2 without --enable-ikev2. Can’t speak to ikev1. I use it with certificate-based authentication.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">./configure --prefix= --enable-eap-mschapv2 --enable-eap-identity --enable-openssl --enable-eap-md5 --enable-eap-tls --enable-eap-dynamic --enable-systemd --enable-swanctl --disable-charon --disable-stroke --disable-scepclient --enable-counters<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Users <users-bounces@lists.strongswan.org> <b>On Behalf Of
</b>Paramashivaiah, Sunil<br>
<b>Sent:</b> Tuesday, July 20, 2021 4:53 AM<br>
<b>To:</b> users@lists.strongswan.org<br>
<b>Cc:</b> Bhattacharjee, Debapriyo (c) <dbhattacharjee@rbbn.com>; Shivakumar Poojari <Shivakumar.Poojari@rbbn.com><br>
<b>Subject:</b> Re: [strongSwan] Replacing Racoon2 with strongswan<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi All,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> If we configure strongswan using the below options will it be sufficient to use it for Ikev1 and Ikev2.<o:p></o:p></p>
<p class="MsoNormal"> Please let me know if we need to add any more plugins like --enable-libipsec --enable-kernel-libipsec<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> ./configure --prefix=/usr --sysconfdir=/etc --enable-charon --enable-swanctl --enable-ikev2 --enable-ikev1 --enable-acert --enable-openssl<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Also by default will there be any plugins that will be enabled. Do we need to disable any plugins. Please suggest.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks and Regards,<o:p></o:p></p>
<p class="MsoNormal">Sunil<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Paramashivaiah, Sunil <br>
<b>Sent:</b> Tuesday, July 20, 2021 1:47 PM<br>
<b>To:</b> <a href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</a><br>
<b>Cc:</b> Shivakumar Poojari <<a href="mailto:Shivakumar.Poojari@rbbn.com">Shivakumar.Poojari@rbbn.com</a>>; Bhattacharjee, Debapriyo (c) <<a href="mailto:dbhattacharjee@rbbn.com">dbhattacharjee@rbbn.com</a>><br>
<b>Subject:</b> Replacing Racoon2 with strongswan<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi All,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> We are planning to replace racoon2 with stongswan in our product for IPsec Ikev1 and Ikve2 functionality.<o:p></o:p></p>
<p class="MsoNormal"> We are trying to build strongswan on debian10 Linux and we find that there are lot of optional plugins available.<o:p></o:p></p>
<p class="MsoNormal"> Could anyone please guide us with required set of plugins that we need to use to build strongswan for Ikev1 and Ikev2
<o:p></o:p></p>
<p class="MsoNormal"> functionality.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks and Regards,<o:p></o:p></p>
<p class="MsoNormal">Sunil <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><br>
Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential and/or proprietary for the sole use of the intended recipient. Any review, disclosure, reliance or distribution by
others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please notify the sender immediately and then delete all copies, including any attachments.<o:p></o:p></p>
</div>
</body>
</html>