Hi All, <div><br></div><div>Any input for this scenario?</div><div><br></div><div>Thanks. </div><div><br></div><div>Regards,</div><div>Jegathesh<br><br><div class="gmail_quote">On Wed, Mar 20, 2013 at 10:29 AM, jegathesh malaiyappan <span dir="ltr"><<a href="mailto:mjegakathir@gmail.com" target="_blank">mjegakathir@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p class="MsoNormal"><span style="color:#17365d">Hi,</span></p>

<p class="MsoNormal"><b><span style="color:#17365d"><br></span></b></p><p class="MsoNormal"><b><span style="color:#17365d">Strongswan : 4.5.3 </span></b></p><p class="MsoNormal"><b><span style="color:#17365d"><br></span></b></p>



<p class="MsoNormal"><span style="color:#17365d"> Strongswan establishing the IKE SA with by-pass
policy configured on the other end. </span></p><p class="MsoNormal"><span style="color:#17365d"><br></span></p>

<p class="MsoNormal"><b><span style="color:#17365d">Could anybody explain
me the reason for this? </span></b></p>

<p class="MsoNormal"><span style="color:#17365d"> </span></p>

<p class="MsoNormal"><b><span style="color:#548dd4">NODE A</span></b><span style="color:#17365d">  </span><span style="font-family:Wingdings;color:#17365d">ß</span><span style="color:#17365d">-----------------------------------------------------------------------</span><span style="font-family:Wingdings;color:#17365d">ą</span><span style="color:#76923c">NODE
B</span></p>

<p class="MsoNormal"><span style="color:#17365d">(Initiator &
Responder)                                                                   
(Initiator & Responder)</span></p>

<p class="MsoNormal"><span style="color:#17365d"> </span></p>

<p class="MsoNormal"><span style="color:#17365d">NODE A ---</span><span style="font-family:Wingdings;color:#17365d">ą</span><span style="color:#17365d"> conn403 <span style="background:yellow">is configured</span> in NODE A</span></p>



<p class="MsoNormal"><span style="color:#17365d">NODE B  --</span><span style="font-family:Wingdings;color:#17365d">ą</span><span style="color:#17365d"> conn403 <span style="background:red">is not configured</span> in NODE B, <span style="background:red">conn0</span> (bypass Policy)
configured </span></p>

<p class="MsoNormal"><span style="color:#17365d"> </span></p>

<p class="MsoNormal"><br></p>

<p class="MsoNormal"><span style="color:#17365d"><snip> <span style="background:red">NODE B</span></span></p>

<p class="MsoNormal"><span style="color:#17365d"> conn conn0</span></p>

<p class="MsoNormal"><span style="color:#17365d">  type=passthrough</span></p>

<p class="MsoNormal"><span style="color:#17365d"> 
leftsubnet=<a href="http://5.5.5.5/32" target="_blank">5.5.5.5/32</a></span></p>

<p class="MsoNormal"><span style="color:#17365d"> 
rightsubnet=<a href="http://50.1.1.10/24" target="_blank">50.1.1.10/24</a></span></p>

<p class="MsoNormal"></snip></p>

<p class="MsoNormal"><span style="color:#17365d"> </span></p>

<p class="MsoNormal"><span style="color:#17365d"><snip> <b><span style="background:yellow">NODE A</span></b></span></p>

<p class="MsoNormal"><span style="color:#17365d">conn conn403</span></p>

<p class="MsoNormal"><span style="color:#17365d">  type=tunnel</span></p>

<p class="MsoNormal"><span style="color:#17365d">  leftsubnet=<a href="http://4.1.1.1/32" target="_blank">4.1.1.1/32</a></span></p>

<p class="MsoNormal"><span style="color:#17365d">  rightsubnet=<a href="http://40.1.1.100/24" target="_blank">40.1.1.100/24</a></span></p>

<p class="MsoNormal"><span style="color:#17365d">  left=4.1.1.1</span></p>

<p class="MsoNormal"><span style="color:#17365d">  right=4.1.1.10</span></p>

<p class="MsoNormal"><span style="color:#17365d">  keyexchange=ikev2</span></p>

<p class="MsoNormal"><span style="color:#17365d"> reauth=no</span></p>

<p class="MsoNormal"><span style="color:#17365d">  ike=aes128-sha1-modp1024,3des-sha1-modp1024!</span></p>

<p class="MsoNormal"><span style="color:#17365d">  ikelifetime=84395s</span></p>

<p class="MsoNormal"><span style="color:#17365d">  esp=aes128-sha1,3des-sha1!</span></p>

<p class="MsoNormal"><span style="color:#17365d">  authby=pubkey</span></p>

<p class="MsoNormal"><span style="color:#17365d">  rightid=%any</span></p>

<p class="MsoNormal"><span style="color:#17365d">  leftid="192.168.255.129"</span></p>

<p class="MsoNormal"><span style="color:#17365d">  keylife=86400s</span></p>

<p class="MsoNormal"><span style="color:#17365d">  dpdaction=restart</span></p>

<p class="MsoNormal"><span style="color:#17365d">  dpddelay=10</span></p>

<p class="MsoNormal"><span style="color:#17365d">  dpdtimeout=120</span></p>

<p class="MsoNormal"><span style="color:#17365d">  rekeyfuzz=50%</span></p>

<p class="MsoNormal"><span style="color:#17365d">  rekeymargin=180s</span></p>

<p class="MsoNormal"><span style="color:#17365d"></snip></span></p>

<p class="MsoNormal"> </p>

<p class="MsoNormal"><span style="color:#17365d">Thanks in advance. </span></p><span class="HOEnZb"><font color="#888888">

<p class="MsoNormal"> </p>

<p class="MsoNormal"><span style="color:#17365d">-Jegathesh</span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#17365d"> </span></p>
</font></span></blockquote></div><br><br></div>