[strongSwan] [Strongswan] no config named 'client'

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Amysue

Please refer to [2] for a how-to for installing strongSwan. 
Please note that some modules that could be necessary for your setup 
need to be compiled by giving the corresponding parameters to ./configure. 

Regards,
Noel Kuntze

GPG Key id: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 18.08.2014 um 15:12 schrieb amysue.z at gmail.com:
> I also want to know are there any special configurations to install strongswan for ikev2 mobike?
> 
> For install strongswan to my pc, I just 
> /./configure/
> /make/
> /make install/
> /
> /
> Thanks,
> 
> 
> 2014-08-18 21:08 GMT+08:00 <amysue.z at gmail.com <mailto:amysue.z at gmail.com>>:
> 
>     Hi Noel,
>     The output of "ipsec statusall" is 
>     /Status of IKE charon daemon (strongSwan 5.0.2, Linux 2.6.18-348.1.1.el5, i686):/
>     /  uptime: 14 minutes, since Aug 18 18:21:46 2014/
>     /  malloc: sbrk 135168, mmap 0, used 86616, free 48552/
>     /  worker threads: 8 of 16 idle, 7/1/0/0 working, job queue: 0/0/0/0, scheduled: 0/
>     /  loaded plugins: charon aes des sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default stroke updown eap-md5 eap-radius xauth-generic/
>     /Listening IP addresses:/
>     /  192.168.2.6/
>     /  12.12.1.203/
>     /Connections:/
>     /Security Associations (0 up, 0 connecting):/
>     /  none/
> 
>     And， how do I  enable logging[1] ? I don't use strongswan much, So it feel difficult for me.
>     Thank you again for your help
> 
> 
> 
>     2014-08-18 21:02 GMT+08:00 Noel Kuntze <noel at familie-kuntze.de <mailto:noel at familie-kuntze.de>>:
> 
> Hello,
> 
> Check your system log for errors and show us the output of "ipsec statusall".
> Sometimes, it takes a couple of seconds for the daemon to load the configuration. Waiting a bit can help in this case.
> The reason for this is, that all the ipsec commands are asynchronous.
> If the configuration isn't loaded for a couple of seconds, please enable logging[1].
> StrongSwan can handle Mobike. It's a daemon thing, not a kernel thing.
> 
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration
> 
> Regards,
> Noel Kuntze
> 
> GPG Key id: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
> 
> Am 18.08.2014 um 14:56 schrieb amysue.z at gmail.com <mailto:amysue.z at gmail.com>:
>> Hello,
> 
>> My OS is centos 5.9 and i have installed Linux strongSwan U5.0.2/K2.6.18-348.1.1.el5.
>> After installation,i start strongswan:
>> ipsec start
>> then i up an connection:
>> ipsec up client
>> then I get an error:*no config named 'client'*
>> Actually, I define an connection in /etc/ipsec.conf.
> 
>> Below is my /etc/ipsec.conf
> 
>> /config setup/
>> /    strictcrlpolicy=no/
>> /    charonstart=yes/
>> /
>> /
>> /conn %default/
>> /    ikelifetime=28800s/
>> /    keylife=28800s/
>> /    rekeymargin=3m/
>> /    keyingtries=3/
>> /    keyexchange=ikev2/
>> /    ike=3des-sha1-modp1024/
>> /    esp=3des-sha1/
>> /
>> /
>> /conn client/
>> /    left=12.12.1.203/ <http://12.12.1.203/>
>> /    leftsourceip=%config/
>> /    leftcert=client1_cert.pem/
>> /    leftid="/C=CN/ST=SH/O=CS/CN=IKEv2_Client1"/
>> /    right=11.11.11.200/ <http://11.11.11.200/>
>> /    rightid="/C=CN/ST=SH/O=CS/CN=11.11.11.200"/
>> /    rightsubnet=192.168.168.0/24 <http://192.168.168.0/24> <http://192.168.168.0/24>/
>> /    auto=add/
>> /
>> /
>> I have no idea what to do now, I really need your help, any one could help me?
>>  Thank you very much
> 
> 
> 
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
>> https://lists.strongswan.org/mailman/listinfo/users
> 
>         _______________________________________________
>         Users mailing list
>         Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
>         https://lists.strongswan.org/mailman/listinfo/users
> 
> 
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=v2BP
-----END PGP SIGNATURE-----