[strongSwan] strongSwan + Windows 7 + IKEv2 + MSCHAPv2 (Username and password)

[Andreas Steffen]

Hello Sven,

usually the "allocating SPI failed" occurs if some necessary
IPsec kernel modules are missing. But you wrote that the strongSwan
OpenSuse installation worked in a different setup. Therefore I
really don't know how to help you. What Linux kernel are you using?

Best regards

Andreas

Kerschbaum, Sven wrote:
> Good morgning everybody,
> 
> hope you had a nice and sunny weekend ;). After trying hard to resolve the issue of failing to allocate a SPI, I have now further ideas what is causing this error:
> 
> 12[IKE] IKE_SA host-host[1] established between 192.168.10.90[C=DE, ST=Bavaria, O=Siemens, OU=andere, CN=ikeclient]...192.168.10.12[192.168.10.12]
> 12[IKE] peer requested virtual IP %any
> 12[CFG] assigning new lease to '192.168.10.12'
> 12[IKE] assigning virtual IP 10.10.3.1 to peer
> 12[IKE] allocating SPI failed
> 12[ENC] generating IKE_AUTH response 5 [ AUTH CP N(MOBIKE_SUP) N(NO_ADD_ADDR) N(NO_PROP) ]
> 
> Does anybody has an idea/hint/...?
> 
> Thanks in advance,
> Sven
> 
> Mit freundlichem Gruß / Best regards
> 
> Sven Kerschbaum
> 
> Siemens AG
> Industry Sector Industry Automation Division
> mailto:sven.kerschbaum at siemens.com
> http://www.siemens.com/automation

======================================================================
Andreas Steffen                         e-mail: andreas.steffen at hsr.ch
Institute for Internet Technologies and Applications
Hochschule fuer Technik Rapperswil      phone:  +41 55 222 42 68
CH-8640 Rapperswil (Switzerland)        mobile: +41 76 340 25 56
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3328 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100511/e3a700db/attachment.bin>