[strongSwan] Unable to establish a IKEv2 PSK - MAC mismatchd

[Adrian Milanoski]

Was anyone able to figure out why this is not working for me?

-
A







From: users-bounces+amilanoski=rim.com at lists.strongswan.org [mailto:users-bounces+amilanoski=rim.com at lists.strongswan.org] On Behalf Of Adrian Milanoski
Sent: Tuesday, July 03, 2012 1:03 PM
To: SaRaVanAn; Martin Willi
Cc: Users at lists.strongswan.org
Subject: Re: [strongSwan] Unable to establish a IKEv2 PSK - MAC mismatchd

Martin,

> Did you include that rw-psk.conf from your main ipsec.conf, or how
should strongSwan find this configuration in a custom file?

rw-psk.conf is included in my configuration and it see when I try and associate it choose the connection profile. See logs.

> Are both peers in this connection running strongSwan? How do your
ipsec.secrets files look like on both peers?

Both peers are not using strongSwan. The client is PlayBook. My secret file is as shown.

strongSwan2  ipsec.secrets

: PSK "T3st"



Regards,

Adrian Milanoski
BBOS Lab Administrator
VPN / WLAN IOT / Pre-Cert Research In Motion Limited
Tel. (289) 261-5801
Email  amilanoski at rim.com<mailto:amilanoski at rim.com>



[www.rim.com]<http://www.rim.com/>[cid:image001.png at 01CB37B8.EC492D80]



From: SaRaVanAn [mailto:saravanan.nagarajan87 at gmail.com]
Sent: Tuesday, July 03, 2012 10:45 AM
To: Martin Willi
Cc: Adrian Milanoski; Users at lists.strongswan.org
Subject: Re: [strongSwan] Unable to establish a IKEv2 PSK - MAC mismatchd

Hi Adrian,
I also faced same kind of issue often.
The issue might exists in identification payload coming from strongswan2 ,which differs from identification configured in Strongswan1 .
Please post your ipsec.secrets file of strongswan 1 and 2.

Regards,
Saravanan N
On Mon, Jul 2, 2012 at 1:04 PM, Martin Willi <martin at strongswan.org<mailto:martin at strongswan.org>> wrote:
Hello Adrian,

> rw-psk.conf

Did you include that rw-psk.conf from your main ipsec.conf, or how
should strongSwan find this configuration in a custom file?

> Errors I am getting all the time now and I have read that there is no
> matching configuration or something along those lines.
Do you have some more details about this error, such as some log output?

> 13[IKE] tried 1 shared key for '%any' - 'vpntest', but MAC mismatched
Are both peers in this connection running strongSwan? How do your
ipsec.secrets files look like on both peers?

Regards
Martin



_______________________________________________
Users mailing list
Users at lists.strongswan.org<mailto:Users at lists.strongswan.org>
https://lists.strongswan.org/mailman/listinfo/users

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120704/40b2e596/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 14342 bytes
Desc: image001.jpg
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120704/40b2e596/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1469 bytes
Desc: image002.jpg
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120704/40b2e596/attachment-0001.jpg>