[strongSwan] received TS_UNACCEPTABLE notify, no CHILD_SA built

Sujoy sujoy.b at mindlogicx.com
Fri Feb 16 10:39:04 CET 2018


Hi Jafar,

  I am able to connect to the same system from other system but failed 
to connect from Openwrt. The config file is same but then also it failed 
by saying "unable to install inbound and outbound IPsec SA (SAD) in 
kernel failed to establish CHILD_SA, keeping IKE_SA".



Thanks & Regards

On Monday 12 February 2018 07:50 PM, Jafar Al-Gharaibeh wrote:
> Sujoy,
>
>      The responder  (at 192.168.10.40) thinks the initiator 
> (192.168.10.38) is proposing 192.168.122.153/32 as  traffic selector. 
> Where is 192.168.122.153 coming from?
>
> --Jafar
>
>
> On 2/12/2018 7:34 AM, Sujoy wrote:
>>
>> Hi Jafar,
>>
>> Following is the logs and configuration of the other node. Cannot 
>> solve this issue for last thirty days.
>>
>>
>>
>> Config setup
>>
>>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180216/7fa99f71/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pblngabcjdkoakoc.png
Type: image/png
Size: 220430 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180216/7fa99f71/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jnkhcejhjoligolg.png
Type: image/png
Size: 409890 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180216/7fa99f71/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mgkahlejamonljfn.png
Type: image/png
Size: 47781 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180216/7fa99f71/attachment-0005.png>


More information about the Users mailing list