[strongSwan] Windows StrongSwan cannot establish CHILD_SA due to CREATE_CHILD_SA kicks in every outbound packet.

[Jaehong Park]

Hi Noel.

I haven’t see your response after my reply

I have further question regarding log.

Am I still missing something?


On Nov 28, 2015, at 10:57 AM, Noel Kuntze <noel at familie-kuntze.de<mailto:noel at familie-kuntze.de>> wrote:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Jaehong,

Your diagnosis is completely wrong. That's not the root of the problem.
It's because charon is not allowed to install the policies into the kernel.

2015-11-28T08:42:56 13[KNL] setting WFP SA SPI failed: 0x80320035
2015-11-28T08:42:56 13[IKE] unable to install IPsec policies (SPD) in kernel
2015-11-28T08:42:56 13[IKE] failed to establish CHILD_SA, keeping IKE_SA


- --

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=uDlj
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20151209/bcd89f66/attachment.html>