Re: [strongSwan] Having forwarding issue in a basic StrongSwan setup

2022-01-28 Thread MOHIT CHALLA (mochalla)
atter the return path filter won't cause any problems and strongSwan won't install any routes so you don't need to change that setting either. Kind regards Noel Am 26.01.22 um 14:30 schrieb MOHIT CHALLA (mochalla): > Hello group, > > I am trying to run some tests in my lab setup w

[strongSwan] Having forwarding issue in a basic StrongSwan setup

2022-01-26 Thread MOHIT CHALLA (mochalla)
Hello group, I am trying to run some tests in my lab setup with a Cisco cloud service router on one side and running StrongSwan version 5.8.2 on the other side (Ubuntu 20.04LTS). I am using loopback interface on the Cisco side, and a normal interface on the Ubuntu side to simulate LAN

Re: [strongSwan] Query on INITIAL_CONTACT

2021-07-14 Thread MOHIT CHALLA (mochalla)
Thanks Tobias! From: Tobias Brunner Date: Wednesday, 14 July 2021 at 2:08 PM To: "MOHIT CHALLA (mochalla)" , "users@lists.strongswan.org" Subject: Re: [strongSwan] Query on INITIAL_CONTACT INITIAL_CONTACT (while acting as initiator) has been a day-1 behaviour on StrongSwa

Re: [strongSwan] Query on INITIAL_CONTACT

2021-07-14 Thread MOHIT CHALLA (mochalla)
Brunner Date: Wednesday, 14 July 2021 at 1:18 PM To: "MOHIT CHALLA (mochalla)" , "users@lists.strongswan.org" Subject: Re: [strongSwan] Query on INITIAL_CONTACT Hi Mohit, This text seems to indicate that StrongSwan sends out INITIAL_CONTACT when it is acting as an initiator unl

[strongSwan] Query on INITIAL_CONTACT

2021-07-14 Thread MOHIT CHALLA (mochalla)
Hi, I have a question regarding INITIAL_CONTACT in IKEv2. I have found the following text in StrongSwan's documentation (https://wiki.strongswan.org/projects/strongswan/wiki/Swanctlconf): connections..unique Default => no Connection uniqueness policy to enforce. To avoid multiple connections

Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-18 Thread MOHIT CHALLA (mochalla)
, Mohit From: Users on behalf of "MOHIT CHALLA (mochalla)" Date: Monday, 18 January 2021 at 9:05 PM To: Volodymyr Litovka , george live , "users@lists.strongswan.org" Subject: Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3 Hi George, I a

Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-18 Thread MOHIT CHALLA (mochalla)
Hi George, I am not 100% sure what is causing the issue, but there are a couple of things which I notice. Cisco static-VTI solution (like the one that is configured on the ASR in your config) automatically uses any-any traffic selectors. I see you are using GRE as encaps on ASR (which is the