[strongSwan] StrongSwan->SonicWall issue
Andrew Munn
andrew at nmedia.net
Wed Jun 8 00:45:02 CEST 2016
I can successfully connect from Windows to a SonicWall using the Windows
SonicWall Global VPN Client. When I try to connect using StrongSwan I
get errors on the SonicWall:
IKEv2 payload processing error
IKEv2 VPN Policy not found - No VPN Policy for peer gateway
on the linux box I get
[ENC] parsing NOTIFY payload finished
[ENC] verifying payload of type NOTIFY
[ENC] NOTIFY payload verified, adding to payload list
[ENC] process payload of type NOTIFY
[ENC] verifying message structure
[ENC] found payload of type NOTIFY
[ENC] parsed IKE_SA_INIT response 0 [ N(INVAL_SYN) ]
[IKE] received INVALID_SYNTAX notify error
[IKE] IKE_SA sr[1] state change: CONNECTING => DESTROYING
ipsec.conf is like:
config setup
charondebug="ike 2, cfg 2, enc 2"
conn sr
left=10.37.250.0/24
leftid=10.37.250.0/24
leftsourceip=%config
right=<ip removed>
rightid=<ip removed>
rightsubnet=10.37.250.0/24
keyexchange=ikev2
authby=psk
#ike=aes256-sha1-modp2048 # tried both of these
ike=aes128-sha1-modp2048! # ... no luck.
esp=aes256-sha1-modp2048
auto=start
config setup
# strictcrlpolicy=yes
# uniqueids = no
charondebug="ike 2, cfg 2, enc 2"
ipsec.secrets is just :
192.168.123.123 <ip removed> : PSK "secret"
Any ideas what is wrong? Thanks
More information about the Users
mailing list