[strongSwan] Win 8.1 fails to connect - error 809 - fragmentation problem?
ck+strongswanusers at bl4ckb0x.de
Mon Jun 8 00:30:21 CEST 2015
> Your certificate lacks a SAN field for your IP, so strongSwan defaults
> back to the DN of the certificate. Generate a new certificate for the
> server, which has that SAN field
> set. It is also advisable to set a SAN field for the DNS name.
>> Sun, 2015-06-07 % 05[CFG] id '126.96.36.199' not confirmed by
>> certificate, defaulting to 'C=DE, ST=Niedersachsen, L=Hannover,
>> O=Privat, OU=StrongSwan, CN=vpn.bl4ckb0x.de, E=ck at bl4ckb0x.de'
Okay. I've fixed it. SAN fields with my IP are now in the certificate.
But it didn't change anything.
> Furthermore, your "esp" and "ike" settings are wrong. Please set
> them correctly. Refer to the man page for details.
I've set this now to:
That should be for start okay.
> Also set fragmentation=yes, because you use certificates
> and try setting the IKE proposal to secure values.
fragmentation=yes is already set.
> I googled error 809 for WIndows 8.1 and it means, that the remote
> server didn't respond.
> Check intermediate and local firewalls to check if they allow outbound
> IPsec traffic.
Well. How can I debug this specific? My linux router has set with
$IPTABLES --append INPUT --protocol 50 --jump ACCEPT
$IPTABLES --append INPUT --protocol 51 --jump ACCEPT
$IPTABLES --append INPUT --protocol udp --destination-port 500 --jump
$IPTABLES --append INPUT --protocol udp --destination-port 4500 --jump
Do I have to forward it explicit to the windows client behind the
More information about the Users