[strongSwan] trap not found, unable to acquire reqid

[Noel Kuntze]

On 06.06.2016 14:28, rajeev nohria wrote:
>
> IKEv2 should be able to create SA when there are only policies installed and a packet matches with the policy. That was reason I was expecting for above ping to work. If that is not the case what is the use of ACQUIRE message? Let me know if I am missing something here.

Charon can only initiate an SA to a remote host, if it has a configuration for that host. Because you installed the policies yourself, charon does not have a configuration.

You have to configure it correctly and use auto=route. Do not install policies yourself. As you found out, it does not work if you do that.

-- 

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160606/355ba15d/attachment.sig>