[strongSwan] strongswan on centos 6

Andreas Steffen andreas.steffen at strongswan.org
Sat Feb 13 15:35:48 CET 2016


Without any log files, preferably from both end points we cannot
diagnose your problem.

Regards

Andreas

On 02/13/2016 03:17 PM, christopher kamutumwa wrote:
> ive installed strong swan and tunnel has been established but subnet
> child(S) not communicating via ping i type 
> 
> ip -s xfrm policy it shows empty what could be the issue
> chris
> 
>  conn %default
>         ikelifetime=28800s
>         keylife=200s
>         rekeymargin=300
>         keyingtries=1
>         keyexchange=ikev1
>         ike=aes128-sha1-modp1024-diffie-hellman group 2
> 
>         esp=3des-sha1
>         ike=3des-sha1-modp1024
>         mobike=yes
>         leftikeport=4500
>         rightikeport=4500
>         authby=secret
>  conn MTN
>   type=tunnel
>     left=185.3.95.94
>     # left=%defaultroute
>     # leftcert=client.cert
>     #     authby=secret
>     leftsubnet=192.168.200.172/17 <http://192.168.200.172/17>
>     leftsourceip=%config
>      leftfirewall=yes
>      right=41.223.117.190
>      #rightid=41.223.117.190
>     rightsubnet=172.25.48.36/32,172.25.48.43/32
> <http://172.25.48.36/32,172.25.48.43/32>
>      #      rightsubnet=172.25.48.36/16 <http://172.25.48.36/16>
>      #  rightsubnet=172.25.48.36
>    auto=start

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4275 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160213/c6147cd3/attachment.bin>


More information about the Users mailing list