[strongSwan] ivalid IKE Payload

Martin Willi martin at strongswan.org
Tue Sep 9 10:40:09 CEST 2014


> eNB - strongswan 5.1.3 + ALU customized patch for cert_id_binding
> With cert_id_binding=no, authentication fails, ("invalid IKE payload" is seen on the sgew)

What IKE implementation is running on the SeGW? Any more log details?

> We don't see this issue if we use strongswan 4.5.2-al4 on the eNB.

As said a few times, there are different ways how to handle that
non-upstream cert-id-binding option, and not all are compatible. The
-al4 version is more standards-compliant, but incompatible to all other
versions, including the 5.1.3 patch.


More information about the Users mailing list