<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<p class="default-style"><span style="font-family: "courier new", courier;">Thanks for the reply</span></p>
<p class="default-style"><span style="font-family: "courier new", courier;">> Please provide me with the full debug information as shown on the HelpRequests</span><br><span style="font-family: "courier new", courier;">> [1] page on the wiki.</span></p>
<p class="default-style"><span style="font-family: "courier new", courier;">I can do this later today when I can go back and spend more time on this, at the moment I have to take care of other priorities.</span></p>
<p class="default-style"><br><span style="font-family: "courier new", courier;">> Additionally, what distribution is that on either side, what virtualization, </span><br><span style="font-family: "courier new", courier;">> and what kernel?</span></p>
<p class="default-style"><span style="font-family: "courier new", courier;">I am using Centos 8.5 with the strongswan binaries provided on the "EPEL" repository. I do not know who built or supplied them or what options they were built with. My kernel version is 5.16.2-1.el8.elrepo.x86_64</span></p>
<p class="default-style"><br><span style="font-family: "courier new", courier;">> I suspect there are more problems lurking around the corner than just that.</span><br><span style="font-family: "courier new", courier;">> This particular problem only occurs if you are trying to use kernel-libipsec,</span><br><span style="font-family: "courier new", courier;">> or XFRM is not working or doesn't have any of the requiored features compiled</span><br><span style="font-family: "courier new", courier;">> in.</span><br><span style="font-family: "courier new", courier;">[...]</span><br><span style="font-family: "courier new", courier;">> That particular error message implies it's kernel-libipsec, which you are not</span><br><span style="font-family: "courier new", courier;">> supposed to use on sites at all, but only on clients without a working or usable</span><br><span style="font-family: "courier new", courier;">> XFRM implementation (e.g. Android).</span><br><span style="font-family: "courier new", courier;">[...]</span><br><span style="font-family: "courier new", courier;">> This particular error message implies it's a problem with the IPsec backend</span><br><span style="font-family: "courier new", courier;">> used.</span></p>
<p class="default-style"><span style="font-family: "courier new", courier;">Based on your comments here, last evening I downloaded the source code from the strongswan site and attempted to build it myself using the default configuration generated by the ./configure script. The binaries seemed to build successfully and when I used my configuration files I did get connection "successful" messages, but I could not ping any systems on the Central network from East (or vice versa) so obviously something was still not working in my own build. Building my own binaries is a bit out of my depth as simply looking at all the ./configure feature options, I wouldn't know which ones to turn on and off to get where I need to be.</span><br></p>
</body>
</html>