Re: [strongSwan] Nokia E-Series vpn client (JFYI)

2009-03-02 Thread sbergman
Hi, For me the NAT traversal between Nokia client and strongSwan has always worked with out a problem. And it seems to be that you have configured the NAT traversal correctly in the phone, because the Nokia client is sending the NAT detection payloads. For me the certificates has been some

[strongSwan] Test ikev2/mobike-virtual-ip

2009-03-02 Thread antonio quisillo
Hi, I want to test the mobike-virtual-ip scenario but I failed. I set-up the network scenario like illustrated in the documentation picture. I followed the documentation test literally. On host Alice, after ipsec up mobike command, when I ran ipsec statusall I obtained: Performance: uptime:

[strongSwan] Astaro does not send a certificate request

2009-03-02 Thread Daniel Mentz
I discovered that the Astaro Security Gateway V7 which uses strongSwan behind the scene sets nocrsend=yes which implies that the Astaro Gateway never sends a certificate request even if it needs to obtain a certificate from the other end. This brakes interoperability and forces me to set