[strongSwan] x509 subjectAltName ipaddress not matching

Tobias Brunner tobias at strongswan.org
Fri May 25 17:14:49 CEST 2012


Hi Sanjay,

> On 10.204.74.189
> config setup
>         uniqueids=replace
>         plutostart=no
>         charonstart=yes
> #Below Are The Configuration for CCM_CCM IPSec Tunnel
> conn LocalIP_LocalIP_10.204.74.188
>         left=10.204.74.189
>         leftcert=ServLcl.pem
>         leftsendcert=yes
>         leftupdown=/opt/ipc/security/ipsectunnel/raiseAlarm_ipsec.sh
>         right=10.204.74.188
>         rightid=10.204.74.189

Your typo here -------------^^^

>         keyexchange=ikev2
>         type=transport
>         reauth=no
>         dpddelay=5s
>         dpdaction=restart
>         keyingtries=%forever
>         auto=route

Regards,
Tobias




More information about the Users mailing list