Re: [strongSwan] strongSwan on a KVM VPS does not work

2012-02-18 Thread hayate
Hi, I think I found the problem, which may be the problem of the KVM provider. Because I changed to another provider and used the same configuration, and it worked well. Further more, I use tcpdump to monitor udp message on both side, and found some message at udp 4500 sent on one side but not re

[strongSwan] strongSwan on a KVM VPS does not work

2012-02-14 Thread hayate
Hi all, I just set up strongSwan server on a KVM VPS, but the connections have problems. First, show my ipsec.conf config setup strictcrlpolicy=no charonstart=yes uniqueids=yes conn %default authby=rsasig leftrsasigkey=%cert rightrsasigkey=%cert

[strongSwan] Ipsec server and l2tp client are both behind NAT

2011-03-11 Thread hayate
Hi all, Currently I'm using strongswan and my ipsec server and client are both behind NAT, connected through internet. The problem is: l2tp client through transport mode cannot establish the connection. I have enabled the nat transport option and set nat_traveral to yes. So is this behavior inte