[strongSwan] OpenWRT. IPSec server

2017-12-28 Thread Sujoy
Hi All, We want to implement StrongSwan,with IPsec in OpenWRT. IPSec server will be running in CentOS and the OpenWRt router will connect to it using VPN. I have configured the server part, struggling to configure the client part. Do we need to open port 4500 for this first. Anyone can

[strongSwan] Struggling to send custom configuration payload between peers

2017-12-28 Thread flyingrhino
Hello fellow strongswan'ers, I've got a strongswan deployment where the responder and initiators need to send custom strings to each other - which I will use in the up/down script for triggering various firewall rules and other setup functions at both ends. I also need to send a couple of

Re: [strongSwan] two road runners collide ?

2017-12-28 Thread Noel Kuntze
Hi, Yes, the problem is caused by your reuse of certificates. strongSwan identifies initiators by their ID by default (it's the only way to detect rekeyings and delete the previous SA correctly). You need to create a new certificate for each initiator. Kind regards Noel On 26.12.2017 17:48,

Re: [strongSwan] IPSec Tunnel IP

2017-12-28 Thread Noel Kuntze
Hello, It's because you set "rightsubnet=0.0.0.0/0" and evidently the AP proposes "1.1.1.127" as its local TS, so it gets narrowed to that. I propose you delete those two lines. Kind regards Noel On 27.12.2017 11:01, Yusuf Güngör wrote: > Hi, > > I have a configuration like below and VPN