[strongSwan] Routing problem on Linux

Old Kid oldkid at gmx.com
Wed Jul 17 10:45:05 CEST 2019


Hello all,
My Windows 10 computer can connect to my strongswan server, though it has 
some weird behavoirs, it works at least. I need to share the VPN adapter's 
with Wifi, reset Wifi to DHCP, connect Wifi and VPN. Only after that I get 
a PPP adapter with default gateway 0.0.0.0 . But on Linux there is no route 
at all,
I use NetworkManager + strongswan plugin, after it connects I have:
default via 192.168.0.1 dev wlp3s0 proto dhcp metric 600 
192.168.0.0/24 dev wlp3s0 proto dhcp scope link src 192.168.0.2 metric 304 
192.168.0.0/24 dev wlp3s0 proto kernel scope link src 192.168.0.2 metric 
600 
192.168.20.100 dev wlp3s0 proto kernel scope link src 192.168.20.100 metric 
50 
192.168.20.100 dev wlp3s0 proto kernel scope link src 192.168.20.100 metric 
600 
avatar at archlinux:~$ 

I don't understand what the first column 192.168.20.100 means. I think it's 
supposed to be a subnet. And I don't think I can add a default route with 
this manually. In addtion, the strongswan android client can't connect at 
all, it says "giving up after 3 retransmits, establishing IKE_SA failed, 
peer not responding". Is there something with this configuration?

conn ikev2-vpn
        auto=route
        compress=no
        type=tunnel
        keyexchange=ikev2
        ike=aes256-aes128-sha256-sha1-modp3072-modp2048-modp1024
        fragmentation=yes
        forceencaps=yes
        dpdaction=clear
        dpddelay=300s
        left=%any
        leftid=@ipsecserver.com
        leftcert=ipsecserver.pem
        leftsendcert=always
        leftsubnet=0.0.0.0/0
        right=%any
        rightid=%any
        rightauth=eap-mschapv2
        leftsourceip=192.168.20.1
        rightsourceip=192.168.20.100/24
        rightdns=8.8.8.8,8.8.4.4
        rightsendcert=never
        eap_identity=%identity


More information about the Users mailing list