[strongSwan] Unable to establish VPN tunnel from China (Strongswan IKEv2)

[Noel Kuntze]

On 13.10.2016 13:01, Oliver Söder wrote:
> Oct 10 14:54:16 Ubuntu-1604-xenial-64-minimal charon: 01[NET] sending packet: from 172.31.1.100[500] to 114.219.152.248[56667] (337 bytes)
> Oct 10 14:54:16 Ubuntu-1604-xenial-64-minimal charon: 10[NET] sending packet: from 172.31.1.100[500] to 114.219.152.248[56667]
> Oct 10 14:54:16 Ubuntu-1604-xenial-64-minimal charon: 01[MGR] checkin IKE_SA (unnamed)[51]
> Oct 10 14:54:16 Ubuntu-1604-xenial-64-minimal charon: 01[MGR] check-in of IKE_SA successful.
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[MGR] checkout IKE_SA
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[MGR] IKE_SA (unnamed)[50] successfully checked out
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[JOB] deleting half open IKE_SA after timeout
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[MGR] checkin and destroy IKE_SA (unnamed)[50]
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[JOB] deleting half open IKE_SA after timeout
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[MGR] checkin and destroy IKE_SA (unnamed)[50]
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[IKE] IKE_SA (unnamed)[50] state change: CONNECTING => DESTROYING
> Oct 10 14:54:21 Ubuntu-1604-xenial-64-minimal charon: 11[MGR] check-in and destroy of IKE_SA successful
> Oct 10 14:54:31 Ubuntu-1604-xenial-64-minimal charon: 04[MGR] checkout IKE_SA

The initiator does not send any packet back. Looks like the GFW drops the packets. You can not work around this.

-- 

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20161013/175d332f/attachment.sig>