[strongSwan] no IKE config found error with VICI interface (strongswan-5.2.2)

Noel Kuntze noel at familie-kuntze.de
Mon Apr 13 14:08:27 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Chinmaya,

Well, if you expect us to help, you should at least give us your source
code and the configuration you're loading.

Mit freundlichen Grüßen/Regards,
Noel Kuntze

Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 13.04.2015 um 14:02 schrieb Chinmaya Dwibedy:
> 
> 
>    
> 
> 
>  
> Hi,
> I have written a C program which uses the VICI to configure and control the IKE daemon Charon (at IKE Responder end). I have updated the request (of type vici_req_t) using the vici_add_key_value() and vici_add_key_valuef(),and send the same via vici_submit (load-conn command). It says that, the connection has been loaded to Charon daemon successfully. But when I run the Charon daemon (at IKE initiator end), I get the following error in Charon log file.
>  
> Jan  1 04:34:10 07[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(N
> ATD_D_IP) ]
> Jan  1 04:34:10 07[CFG] looking for an ike config for 10.20.20.1...10.20.20.4
> Jan  1 04:34:10 07[IKE] no IKE config found for 10.20.20.1...10.20.20.4, sending
>  NO_PROPOSAL_CHOSEN
> Jan  1 04:34:10 07[ENC] added payload of type NOTIFY to message
> Jan  1 04:34:10 07[ENC] order payloads in message
> Jan  1 04:34:10 07[ENC] added payload of type NOTIFY to message
> Jan  1 04:34:10 07[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
>  
> Note that, I have configured matching proposal for IKE and Child SA at both ends and using strongswan-5.2.2. Can anyone please suggest what I am doing wrong? Thanks in advance for your support.
>  
> Regards,
> Chinmaya
> 
> 
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJVK7G3AAoJEDg5KY9j7GZYfJoP/jvzC/DsaoAHIX/JKKEc91NX
n+cBViJECpIRL5L4NNBjtJ4lIOr0jZ/tgrt5EQAXagaK+KhstHemsjmVjK/SV87H
sB3CEDaR6Ht5JmrpEiT76+qGOF1ibT3qlUvPoKE+z6xMpryjfXHFGDjs18Fkz8Y7
VeJcrZ7e8JO+CNKBbE8wsi9k/iQSsPquXO68xRhbpRgMIIzZ3lWND/YKXnQiq5FG
Owc7U12IDwo5pDHdDwnNQYwYG+fbGuuEnY0inEFwXybyyhEDEVlmpzFekE+BSgTy
cxHtt+7m0sJLcnogzCxJdZx1deQAk3bZsIGSvGE/ho+VrNhjEdlkqCkLwk7Uw12u
apzE34TWYpL5GL5ffMQQ3qeocQHLf/5txm/T4bKkb/4GOi8xknUvFPyIA1XmKDpU
4uYbCKYHsWXFMSj+zDVFWheQ8LltEeApuLLSmKECWl6Ok3ucIerSm9Yag4f82wjJ
fECXLwfaV4xAtyVLvrHO+MDGdXZ30VUcjqCnfcwJDlMdWL1v2xXAIN3Z0ue2uCl1
qP34ZhiFqfecX1J662mllTutf+SM5etKw5NYRBwMCNm/VE7Ma2P1ODRB4GYGFOrO
X1Ik2JeCAr0+4vy8W3Xyr0ho3XJ9LBH9Za3/yy7GHGYkORP5ycGcCX7uechGQj4d
bpOgew4i5EgNKGBXJ8YA
=01GK
-----END PGP SIGNATURE-----


More information about the Users mailing list