[strongSwan] received TS_UNACCEPTABLE notify, no CHILD_SA built

[Sujoy]

Hi Noel,

Same strongswan 5.3.3 configuration working in my VM(client) to desktop 
server. But not working from my OpenWRT to Global IP used nated Linux 
server. Can you help me to solve this.

what means "received TS_UNACCEPTABLE notify, no CHILD_SA built"

Server config file.




Thanks & Regards

Sujoy

On Thursday 04 January 2018 03:38 AM, Noel Kuntze wrote:
> Hi,
>
> Only on the responder.
> If you use dpd and enforce UDP encapsulation, you do not need to open any ports on the initiator side.
> Refer to the UsableExamples wiki page[1] for example configurations that are usable in the real world.
>
> Kind regards
>
> Noel
>
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/UsableExamples
>
> On 28.12.2017 08:51, Sujoy wrote:
>> Hi All,
>>
>>
>> We want to implement StrongSwan,with IPsec in OpenWRT. IPSec server will be running in CentOS and the OpenWRt router will connect to it using VPN. I have configured the server part, struggling to configure the client part. Do we need to open port 4500 for this first.
>>
>> Anyone can suggest any solution for this.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180116/34739b76/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dppamffglcckgelf.png
Type: image/png
Size: 128514 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180116/34739b76/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: glpenhclhpbdiklb.png
Type: image/png
Size: 39616 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180116/34739b76/attachment-0003.png>