[strongSwan] Can NOT Ping private client IP from Strongswan VPN server

Tobias Brunner tobias at strongswan.org
Mon Feb 25 11:50:13 CET 2019


Hi Moses,

> Security Associations (1 up, 0 connecting):
>    ikev2-vpn[21]: ESTABLISHED 41 minutes ago,  102.1*9.2**.***[
> 102.1*9.2**.***]... 185.135.*.** [remoteprivate]
>    ikev2-vpn[21]: IKEv2 SPIs: 0338f500edc84652_i 1ae30618408f64a4_r*,
> rekeying disabled
>    ikev2-vpn[21]: IKE proposal:
> AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048

You don't have any CHILD_SAs established.  Check the logs.

Regards,
Tobias


More information about the Users mailing list