[strongSwan] Changing IKE port
Eric Boudrand
eric.boudrand at thegreenbow.com
Wed Jul 13 19:04:10 CEST 2016
Hi Tobias,
> That's unfortunate, because it would have been interesting to see
> whether the client added a non-ESP marker to the packet or not (four
> zero bytes). If neither port is 500 charon expects that to be the case,
> if not the packet is silently discarded after it has been read from the
> socket.
Sorry. Here is a the complete log. This time, I recompiled Strongswan
with socket-dynamic plugin.
Jul 13 18:44:44 ikev2 charon: 03[NET] received packet => 184 bytes @
0xafaa49f0
Jul 13 18:44:44 ikev2 charon: 03[NET] 0: 46 F9 B2 43 68 DA 95 DA 00
00 00 00 00 00 00 00 F..Ch...........
Jul 13 18:44:44 ikev2 charon: 03[NET] 16: 01 10 02 00 00 00 00 00 00
00 00 B8 0D 00 00 38 ...............8
Jul 13 18:44:44 ikev2 charon: 03[NET] 32: 00 00 00 01 00 00 00 01 00
00 00 2C 01 01 00 01 ...........,....
Jul 13 18:44:44 ikev2 charon: 03[NET] 48: 00 00 00 24 00 01 00 00 80
01 00 07 80 02 00 04 ...$............
Jul 13 18:44:44 ikev2 charon: 03[NET] 64: 80 03 00 03 80 04 00 05 80
0B 00 01 80 0C 03 20 ...............
Jul 13 18:44:44 ikev2 charon: 03[NET] 80: 80 0E 00 80 0D 00 00 14 44
85 15 2D 18 B6 BB CD ........D..-....
Jul 13 18:44:44 ikev2 charon: 03[NET] 96: 0B E8 A8 46 95 79 DD CC 0D
00 00 14 90 CB 80 91 ...F.y..........
Jul 13 18:44:44 ikev2 charon: 03[NET] 112: 3E BB 69 6E 08 63 81 B5 EC
42 7B 1F 0D 00 00 14 >.in.c...B{.....
Jul 13 18:44:44 ikev2 charon: 03[NET] 128: 7D 94 19 A6 53 10 CA 6F 2C
17 9D 92 15 52 9D 56 }...S..o,....R.V
Jul 13 18:44:44 ikev2 charon: 03[NET] 144: 0D 00 00 14 4A 13 1C 81 07
03 58 45 5C 57 28 F2 ....J.....XE\W(.
Jul 13 18:44:44 ikev2 charon: 03[NET] 160: 0E 95 45 2F 00 00 00 14 AF
CA D7 13 68 A1 F1 C9 ..E/........h...
Jul 13 18:44:44 ikev2 charon: 03[NET] 176: 6B 86 96 FC 77 57 01 00
k...wW..
Jul 13 18:44:44 ikev2 charon: 03[NET] received packet: from
192.168.30.200[6701] to 192.168.30.22[6701]
Jul 13 18:44:44 ikev2 charon: 03[NET] waiting for data on sockets
I am doing my tests with the VPN Client and Strongswan in the same LAN.
Regards.
Eric Boudrand
More information about the Users
mailing list