[strongSwan] Proposal Logging

[Brian Watson]

That did it. Thanks!

On Thu, Oct 16, 2014 at 11:37 AM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hi Brian,
>
> the following line in ipsec.conf
>
>   charondebug="cfg 2"
>
> should do the job as the following example scenario shows:
>
> http://www.strongswan.org/uml/testresults5dr/ikev2/alg-blowfish/
>
> Oct  6 19:46:41 moon charon:
> 04[CFG] received proposals:
> ESP:BLOWFISH_CBC_192/HMAC_SHA2_256_128/NO_EXT_SEQ
> 04[CFG] configured proposals:
> ESP:BLOWFISH_CBC_192/HMAC_SHA2_256_128/NO_EXT_SEQ,
> ESP:BLOWFISH_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ
> 04[CFG] selected proposal:
> ESP:BLOWFISH_CBC_192/HMAC_SHA2_256_128/NO_EXT_SEQ
>
> Best regards
>
> Andreas
>
> On 10/16/2014 05:31 PM, Brian Watson wrote:
> > Hi,
> >    I want to debug the following problem:
> >
> > 1. ipsec.conf has esp=aes256
> > 2. I try to establish a VPN connection initiated by my handset and
> > StrongSwan responds with No Proposal Chosen
> > 3. I would like to see what the problem is by seeing what the proposals
> are.
> > 4. I set cfg, mgr, ike,esp,knl, etc to be equal to 4 in strongswan.conf
> > for filelog in order to get more detailed information from the logs, but
> > it still doesn't show the proposals.
> >
> > Any ideas as to what I might be doing wrong?
> >
> > Thanks,
> >    Brian
> >
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Open Source VPN Solution!          www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20141016/199eae27/attachment.html>