[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] Problems with conneting to stongSwan server from
From:       Andreas Steffen <andreas.steffen () strongswan ! org>
Date:       2009-12-28 9:25:10
Message-ID: 4B387976.30109 () strongswan ! org
[Download RAW message or body]

Hi Jan,

this is not much information that you are giving.
A strongSwan log would be most welcome. Are there
any IKE_SA_INIT packets arriving on the strongSwan
server? If not, does the IKE_SA_INIT packet leave
the Windows 7 client (check with wireshark). If
the IKE_SA_INIT packet leaves the Win7 client
does the LANCOM router forward packets arriving
at its outer UDP ports 500 and 4500 to the strongSwan
server?

Best regards

Andreas

P.S. The nat_traversal=yes directive in ipsec.conf
     is not necessary. NAT traversal is always enabled
     with the IKEv2 charon daemon.

Jan Luca wrote:
> Hello,
> 
>  
> 
> I have install a strongSwan server with this ipsec.conf:
> 
>  
> 
> # /etc/ipsec.conf - strongSwan IPsec configuration file
> 
>  
> 
> config setup
> 
>        plutostart=no
> 
>        nat_traversal=yes
> 
>  
> 
> conn test
> 
>        left=%any
> 
>        leftcert=<Name of cert of strongSwan>
> 
>        leftsubnet=192.168.5.0/24
> 
>        right=%any
> 
>        rightsourceip=192.168.254.1
> 
>        rightid=<Cert Details>
> 
>        auto=add
> 
>        keyexchange=ikev2
> 
>  
> 
> ipsec.secrets:
> 
>  
> 
> : RSA <Name of the key> <pass>
> 
>  
> 
> The server is after a NAT of a LANCOM 1821 (LANCOM 1821 Wireless ADSL
> 
> (Ann.B) 3.36.0026 / 18.05.2004). I open the ports 500 and 4500 on the
> router. 
> 
>  
> 
> So now I try to connect to the server with a Win 7 client, but it don't get
> a connection (server not found). What do I wrong?
> 
>  
> 
> Viele Grüße
> 
> Jan

======================================================================
Andreas Steffen                         andreas.steffen@strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

[prev in list] [next in list] [prev in thread] [next in thread]