[strongSwan] Allowing Multiple logins from same user

address it sends a logout from to the existing connection? Regards, Adrian Milanoski [Description: Description: Description: hme_scrn_ind_new_notification_Precsn_Zen_801421_11]<http://www.blackberry.com/> - This transm

Re: [strongSwan] Why is strongswan keeping so many enttires in my iptables?????

306 proto 50 ACCEPT all -- 10.244.134.220.0.0.0/0policy match dir in pol ipsec reqid 305 proto 50 ACCEPT all -- 0.0.0.0/010.244.134.22policy match dir out pol ipsec reqid 305 proto 50 Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN

Re: [strongSwan] Why is strongswan keeping so many enttires in my iptables?????

Any update on why this is happening? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email amilano...@blackberry.com<mailto:amilano...@blackberry.com> [Description: Description: cid:image001.gif@01CDFFB

Re: [strongSwan] Locating a missing ICMP traffic

HI Pavel, That worked thank you Tunnel was established and ESP packets were arriving at the GW when I looked at the tcpdump but don't know what was happening to the packet eventually found the sequence was off. Thanks :) Regards, Adrian Milanoski Lab Administrator BBOS WiF

[strongSwan] Locating a missing ICMP traffic

Hi all, I am trying to debug why I can ping resources in my intranet and it works and then its stops working yet tunnel stays established? Is there a way to see if the GW is decrypting my ESP packet and to try and trace where it is going? Thanks in advance Regards, Adrian Milanoski Lab

[strongSwan] Why is strongswan keeping so many enttires in my iptables?????

HI list, I have 300+ entries in my iptables -L and restarting strongswan doesn't clear them and it is a production GW that I cannot simple restart. How can I resolve this? And why is it happening so I can resolve it for the future? Thanks in advance Regards, Adrian Milanosk

Re: [strongSwan] IPv6 routing cycle

doesn't do a single thing with it. Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry.com -Original Message----- From: Adrian Milanoski Sent: Tuesday, December 03, 201

[strongSwan] unknown attribute type (16390)

Does any know what this error code means? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D 4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5 Tel.(289) 261-5801 | Fax.(905) 629-7836 Email amilano...@blackberry.com<mailto:amilano...@blackbe

Re: [strongSwan] IPv6 routing cycle

th 32, who has fc00::11d7:8059:b4fd:122c ^C64 packets captured 101 packets received by filter 7 packets dropped by kernel My router is receiving the ICMPv6 solicitation packet why doesn't it respond? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel

Re: [strongSwan] IPv6 routing cycle

ICMP6, echo request, seq 10, length 16 18:38:07.048801 IP6 fc00::1 > ff02::1:ff02:2: ICMP6, neighbor solicitation, who has fc00::2:2, length 32 Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@b

Re: [strongSwan] IPv6 routing cycle

ed by strongSwan? Regards, Adrian Milanoski Lab Administrator BBOS WiFi VPN Security Testing. - R&D Tel.(289) 261-5801 | Cel: (647)289-6995 Email: amilano...@blackberry.com Berried into cloud 10 da next level!l!.. Original Message From: Noel Kuntze Sent: Tuesday, November 19, 2013 12:07 PM T

Re: [strongSwan] IKEv2 PSK IPv4 to IPv6 not Routing

seq=0xe0), length 100 Is there something else that needs to be set in the kernel for IPv6 to properly forward and route traffic? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry

Re: [strongSwan] IKEv2 PSK IPv4 to IPv6 not Routing

HI, Changed forwarding to 1 on all interfaces now. Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry.com rightsourceip=fc00::2:0/64 Subnet on the private side is FCc00::/64

Re: [strongSwan] IKEv2 PSK IPv4 to IPv6 not Routing

Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry.com -Original Message- From: Martin Willi [mailto:mar...@strongswan.org] Sent: Friday, November 15, 2013 4:15 AM To: Adrian Milanoski Cc: U

Re: [strongSwan] Left subnet Limitation?

Hi Martin, Thanks for the response. Simplifying the subnet was not an option unfortunately as customers are requesting this. Appreciate your prompt response either way as always. :) Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 |

[strongSwan] IKEv2 PSK IPv4 to IPv6 not Routing

trying to ping FC00::2 and see nothing. Can someone please shed some light on this grim situation for me? Thanks in advance. Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D 4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5 Tel.(289) 261-5801 | Fax.(905) 629-

[strongSwan] Left subnet Limitation?

nyone comment on this limitation? Is this a bug? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D 4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5 Tel.(289) 261-5801 | Fax.(905) 629-7836 Email amilano...@blackberry.com<mailto:amilano...@blackberry.com>

Re: [strongSwan] Allowing Certain Ranges to use certain PSK in ipsec.secerts

Perfect thanks Tobias I will try and upgrade my current version to the latest one Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry.com -Original Message- From: To

Re: [strongSwan] FW: A question for StronSwan mailing list.

Thank you Martin Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry.com -Original Message- From: Martin Willi [mailto:mar...@strongswan.org] Sent: Wednesday, Novembe

[strongSwan] FW: A question for StronSwan mailing list.

Hello StrongSwan users, A colleague of mine is wondering if it is possible to do the following. See below. Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email amilano...@blackberry.com<mailto:

[strongSwan] Allowing Certain Ranges to use certain PSK in ipsec.secerts

HI all, Is it possible to setup ipsec.secrets to allow only certain subnets to use certain PSKs 24.177.*.* : PSK "tempskforme" Is this at all possible? How can I control which subnets are allowed to access my GW? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Securi

Re: [strongSwan] Configuration of RIGHTID with a wildcard

done. "CN=* OU=Marketing O=BlackBerry S=ON C=CA EMAIL=*@srpvpn.net" Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing – R&D Tel.(289) 261-5801 | Cel: (647) 289-261-5801 Email  amilano...@blackberry.com -Original Message- From:

[strongSwan] Configuration of RIGHTID with a wildcard

net> Passes conn ikev2_pki_GW_EMAIL_CL_EMAIL leftcert=ss3ecgdsadev.srpvpn.netcert.pem leftid=bboslabad...@srpvpn.net rightid=us...@srpvpn.net<mailto:rightid=us...@srpvpn.net> Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D

[strongSwan] RFC 5639 Support for ECC Brainpool Curves for IKEv2 Key Exchange

HI all, Can anyone provide me any information on if strongSwan currently support the following RFC or not? Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN. Security Testing - R&D Research In Motion Limited [Description: Description: Description: www.rim.com]<http://www.

Re: [strongSwan] Routing Polices with IPTABLES not working

routed out my public interface and they are not NAT'd. Regards, Adrian Milanoski Lab Administrator BBOS WiFI VPN Dev. Security Testing Research In Motion Limited Tel.(289) 261-5801 | Cell: 647-289-6995 Email  amilano...@rim.com -Original Message- From: Martin Willi [mailt

Re: [strongSwan] Routing Polices with IPTABLES not working

Yeah I am running v5.0 and the leftnexthop has been removed. :( I am looking into setting some static routing on my updown script that can be run each time or have a permanent route in place for all my virtual ip address as they arrive. Regards, Adrian Milanoski Lab Administrator BBOS

Re: [strongSwan] Routing Polices with IPTABLES not working

nly 1 default GW on my GW and that is for the public. I do not have a GW set for my private network. I am trying to get it so that any packets that come from 172.16.24.x go back out to the private interface or to the default GW for that matter. Regards, Adrian Milanoski Lab Administrator BBOS

[strongSwan] Routing Polices with IPTABLES not working

. Any help would be much appreciated. Regards, Adrian Milanoski BBOS Lab Administrator VPN / WLAN IOT / Pre-Cert Research In Motion Limited 4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5 Tel.(289) 261-5801|Fax (905) 629-7836 Email amilano...@rim.com<mailto:amilano...@rim.com> [Descr

Re: [strongSwan] Unable to establish a IKEv2 PSK - MAC mismatchd

Was anyone able to figure out why this is not working for me? - A From: users-bounces+amilanoski=rim@lists.strongswan.org [mailto:users-bounces+amilanoski=rim@lists.strongswan.org] On Behalf Of Adrian Milanoski Sent: Tuesday, July 03, 2012 1:03 PM To: SaRaVanAn; Martin Willi Cc

[strongSwan] Unable to establish a IKEv2 PSK - MAC mismatchd

HI all, I currently have 2 strongSwans in my environment and one is currently authenticating and 1 is not. I have cloned the configurations to the 'T' and yet still once allow authentication to pass. The one that is passing authentication is only passing authentication with 1 username, but w

Re: [strongSwan] help: ping behaviour when tunnel is not established

private network. Do you see similar symptoms? Regards, Adrian Milanoski Short Range Protocols Lab Administrator Research In Motion Limited Tel.(289) 261-5801 Email amilano...@rim.com<mailto:amilano...@rim.com> [www.rim.com]<http://www.rim.com/>[cid:image001.png@01CB37B8.EC492

Re: [strongSwan] strongSwan 4.5.0 Not routing

auto=add Regards, Adrian -Original Message- From: users-bounces+amilanoski=rim@lists.strongswan.org [mailto:users-bounces+amilanoski=rim@lists.strongswan.org] On Behalf Of Adrian Milanoski Sent: Wednesday, February 15, 2012 1:51 PM To: Martin Willi Cc: users

Re: [strongSwan] strongSwan 4.5.0 Not routing

Martin, Ipv4 ip_forward is enabled Regards, Adrian -Original Message- From: users-bounces+amilanoski=rim@lists.strongswan.org [mailto:users-bounces+amilanoski=rim@lists.strongswan.org] On Behalf Of Adrian Milanoski Sent: Wednesday, February 15, 2012 1:35 PM To: Martin

Re: [strongSwan] strongSwan 4.5.0 Not routing

How can I check to see if that is enabled? I will try googling now in parallel Thank you for the response Regards, Adrian Milanoski Short Range Protocols WLAN IOT / Pre-Cert Lab Administrator Research In Motion Limited Tel. (289) 261-5801 Email  amilano...@rim.com

Re: [strongSwan] strongSwan 4.5.0 Not routing

Can anyone assist with this issue? Thanks, Adrian From: users-bounces+amilanoski=rim@lists.strongswan.org [mailto:users-bounces+amilanoski=rim@lists.strongswan.org] On Behalf Of Adrian Milanoski Sent: Tuesday, February 07, 2012 2:18 PM To: users@lists.strongswan.org Subject

[strongSwan] strongSwan 4.5.0 Not routing

Hello all, I have been part of this list for maybe the last 6 months or so and have learn a few things from the on going discussions. Finally I have my own issue, which has been an issue for my setup since I configured it. My GW is configured with IKEv2 PSK and I can authenticate without any