[strongSwan] Conn linux roadwarrior, psk, nat,
Ireneusz Smoczkiewicz
ismoczkiewicz at gmail.com
Sun Dec 25 21:33:46 CET 2011
Hi all.
I've made my config to connect to Linksys RV082. It's how it looks like:
config setup
plutodebug=all
# crlcheckinterval=600
# strictcrlpolicy=yes
# cachecrls=yes
nat_traversal=yes
charonstart=yes
plutostart=yes
conn mycon
authby=secret
auth=esp
pfs=yes
keyingtries=1
ike=3des-md5-modp1024
esp=3des-md5
left=%defaultroute
leftsubnet=192.168.0.0/24
right=83.XX.XXX.XXX
rightsubnet=192.168.98.0/24
auto=add
But I'm getting nowhere with this. Om my console I see:
...
sending packet: from 192.168.0.104[500] to 83.XX.XXX.XXX[500]
giving up after 5 retransmits
establishing IKE_SA failed, peer not responding
On remote gateway in logs I can see:
[Tunnel Negotiation Info] <<< Responder Received Quick Mode 1st packet
Dec 25 21:19:34 2011 VPN Log [Tunnel Negotiation Info] Inbound
SPI value = 2d9e202d
Dec 25 21:19:34 2011 VPN Log [Tunnel Negotiation Info] Outbound
SPI value = 10c2b009
Dec 25 21:19:34 2011 VPN Log [Tunnel Negotiation Info] >>>
Responder send Quick Mode 2nd packet
Dec 25 21:19:34 2011 VPN Log [Tunnel Negotiation Info] <<<
Responder Received Quick Mode 3rd packet
Dec 25 21:19:34 2011 VPN Log [Tunnel Negotiation Info] Quick
Mode Phase 2 SA Established, IPSec Tunnel Connected
Dec 25 21:19:34 2011 VPN Log Dead Peer Detection Start, DPD
delay timer=10 sec timeout=10 sec
Dec 25 21:19:34 2011 VPN Log ignoring Delete SA payload: IPSEC
SA not found (maybe expired)
.....
Dec 25 21:19:34 2011 VPN Log ignoring Delete SA payload: IPSEC
SA not found (maybe expired)
Please help me - I've stuck :(
Thanks
--
Ireneusz Smoczkiewicz
More information about the Users
mailing list