[strongSwan] How can I connection strongswan server with vpnc client?

Azfar Hashmi azfar.hashmi at cloudways.com
Tue Apr 2 12:35:02 CEST 2013


Hi,

I had same issue with Shrewsoft vpn client and if I remember correctly I
changed two things in client settings and then it start working, Set
Exchange type to MAIN from Aggressive and set IKE Config to PULL instead
of PUSH.

On 4/2/2013 3:01 PM, Chopin Ngo wrote:
> Hi all,
> My strongswan 5.0.2 installed in Debian 6 x64, I can connection it
> with iOS client and Windows 7 client.
> I create a conn section with PSK auth
>
> conn vpnc
>         keyexchange = ike
>         auto = add
>         authby = psk
>         left = %defaultroute
>         leftsubnet = 0.0.0.0/0 <http://0.0.0.0/0>
>         right = %any
>         rightsourceip = 10.0.0.0/24 <http://10.0.0.0/24>
>         rightauth = psk
>
> When I connection with VPNC 0.5.3 client, it respone error "response
> was invalid [1]:  (ISAKMP_N_INVALID_EXCHANGE_TYPE)(7)"
> And strongswan server log
>
> Apr  2 17:45:52 vpn charon: 15[IKE] 123.234.123.234 is initiating a
> Aggressive Mode IKE_SA
> Apr  2 17:45:52 vpn charon: 15[IKE] Aggressive Mode PSK disabled for
> security reasons
> Apr  2 17:45:52 vpn charon: 15[ENC] generating INFORMATIONAL_V1
> request 505813678 [ N(AUTH_FAILED) ]
>
> I want use vpnc on tomatousb firmware with my Asus RT-N16.
> I had installed strongswan 5.0.2 packages with entware on my RT-N16,
> but it cannot running.(miss some kernel modules)
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users


-- 

AzfarHashmi

Cloudways

Your Managed Cloud

 

e: azfar.hashmi at cloudways.com

w: www.cloudways.com <http://www.cloudways.com>

 

PGP keyid: 0xF42034B0F915D729

http://keyserver.pgp.com

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130402/d663d356/attachment.html>


More information about the Users mailing list