Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-18 Thread Noel Kuntze
Hi all, Please provide logs as shown on the HelpRequests page[1] on the wiki. Kind regards Noel [1] https://wiki.strongswan.org/projects/strongswan/wiki/HelpRequests Am 18.01.21 um 12:44 schrieb Volodymyr Litovka: Hi George, I don't remember exactly Cisco's commands to configure

Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-18 Thread MOHIT CHALLA (mochalla)
, Mohit From: Users on behalf of "MOHIT CHALLA (mochalla)" Date: Monday, 18 January 2021 at 9:05 PM To: Volodymyr Litovka , george live , "users@lists.strongswan.org" Subject: Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3 Hi George, I a

Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-18 Thread MOHIT CHALLA (mochalla)
ld have complained during SA_INIT itself. Thanks, Mohit From: Users on behalf of Volodymyr Litovka Date: Monday, 18 January 2021 at 5:15 PM To: george live , "users@lists.strongswan.org" Subject: Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3 H

Re: [strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-18 Thread Volodymyr Litovka
Hi George, I don't remember exactly Cisco's commands to configure encryption, but it seems you config misses encryption settings for IKE negotiation. Your config on Cisco side should looks like the following: ! This is IKE encryption crypto isakmp policy 10   encryption ...   hash ...   group

[strongSwan] Facing a strange issue between Cisco ASR and strongswan v5.3

2021-01-14 Thread george live
Hi all, I am using strongswan version 5.3 on aws cloud and trying to set ipsec with a ciscoasr in customer site. It is not a complex scenario but the logs are telling me that strongswan is saying 'no proposals chosen'. It is a ikev1, aes256, sha1 and df group 2. Below are the configs: