Re: [strongSwan] %any in ipsec.secrets

2012-03-09 Thread Germano Veit Michel
Hello Andreas, I tried that but still no go: |af+type: OAKLEY_AUTHENTICATION_METHOD |length/value: 1 |[1 is pre-shared key] "x-ethernet0" #1: Can't authenticate: no preshared key found for '10.1.1.1' and '10.1.1.2'. Attribute OAKLEY_AUTHENTICATION_METHOD "x-ethernet0" #1: n

Re: [strongSwan] %any in ipsec.secrets

2012-03-09 Thread Andreas Steffen
Hello Germano, the order of the identities in ipsec.secrets entries does not matter. If %any does not work then just define 10.1.1.2 : PSK "test123" Regards Andreas On 09.03.2012 18:24, Germano Veit Michel wrote: > Hello, > > Let me describe a simple scenario (that works): > > A <---

[strongSwan] %any in ipsec.secrets

2012-03-09 Thread Germano Veit Michel
Hello, Let me describe a simple scenario (that works): A <--> B 10.1.1.1 10.1.1.2 ipsec.conf is properly configured for both A and B. ipsec.secrets for A 10.1.1.1 10.1.1.2 : PSK "test123" ipsec.secrets for B 10.1.1.2 10.1.1.1 : PSK "test