[strongSwan] Equivalent strongswan settings for racoon config

Martin Willi martin at strongswan.org
Fri Sep 19 10:48:58 CEST 2014


Hi,

> It's seems fairly straightforward however I am continually
> getting the error "no ike config found".

> conn test
>     keyexchange=ikev1
>     nat_traversal=yes

nat_traversal is not a conn specific option, and has been deprecated
with 5.x.

>    left=x.x.x.x 

Usually you define the right side as remote, so set right to the peers
address. If you set left, set it to a local address to use.

Further, you may add something like:
  ike=aes128-sha1-modp1024!
  esp=aes-sha1!
  rightid=test at test.com

Also you probably need a leftid for your local peer, and put your
password in ipsec.secrets.

Please include a log excerpt of your connection attempt if it doesn't
work.

Regards
Martin



More information about the Users mailing list