[strongSwan] Issue in VPN connection (IKEv1) with XAUTHPSK using android (ICS vpn client) with Strongswan 4.5.0 server
kbhatnagar at sta.samsung.com
Thu May 3 19:40:13 CEST 2012
I am trying to setup the IKEv1 VPN connection with type as IPSEC XAUTH PSK on android ICS with strongswan server.
Below is my /etc/ipsec.conf
below is the snapshot of ipsec.secrets
192.168.43.62 192.168.43.212 %any : PSK "whatyouseeiswhatyouget"
: RSA serverKey.pem
ipsecvpn : XAUTH 0x7365637265743230313200
Above in ipsec.secrets file, I already provided xauth password in binary format with NULL terminated for taking care of Android 4 implementation.
Configured the same settings on client with the same PSK and xauth password.
After the above settings, when I tried to enable VPN on client, from the wireshark logs of server, I observe that client is keep on sending Identity protection (main mode) message to the server but the server is not replying back.
Upon checking the server logs, I observe following error - "packet from 192.168.43.62:500: initial Main Mode message received on 192.168.43.212:500 but no connection has been authorized with policy=XAUTHPSK+XAUTHSERVER".
Below are the log snippets.
May 3 13:11:48 Linux pluto: | preparse_isakmp_policy: peer requests XAUTHPSK+XAUTHSERVER authentication
May 3 13:11:48 Linux pluto: packet from 192.168.43.62:500: initial Main Mode message received on 192.168.43.212:500 but no connection has been authorized with policy=XAUTHPSK+XAUTHSERVER
May 3 13:11:48 Linux pluto: | next event EVENT_REINIT_SECRET in 2635 seconds
Can somebody please provide some update on the above error.
More information about the Users