[strongSwan] Fwd: Re: INVALID_ID_INFORMATION

[Peter Albrecht]

Should have gone here as well ...


----------  Weitergeleitete Nachricht  ----------

Betreff: Re: [strongSwan] INVALID_ID_INFORMATION
Datum: Freitag, 29. April 2011
Von: Peter Albrecht <albrecht at opensourceservices.de>
An: Andreas Steffen <andreas.steffen at strongswan.org>

Hello Andreas,

Thanks for the reply.

>   conn whatever
>        right=<ip-of-cisco>
>        rightid=192.168.230.3
>        rightsubnet=<ip-of-remote-network>

In the mean time, I figured it out myself. So that's what I did and what 
additionally is required is having all IP addresses in /etc/ipsec.secrets 
(and that was actually missing in my case):

<local-ip> <remote-ip> 192.168.230.3 : PSK "<the-secret-key>"

Now it's working like a charm.

Thank you,

Peter

-------------------------------------------------------