Hello All,
Please I need your Help
I'm struggling (Weeks ..) to get Strongswan to work with my Blackberry Z10
Without success.
Can you please help
I get every time a Delay connection error on my BB10
Is the issue linked to : "loading EAP_MSCHAPV2 method failed" ?
What is wrong in my configuration
Hi Christian,
> Is the issue linked to : "loading EAP_MSCHAPV2 method failed" ?
So check the log and `ipsec listall`. Is the eap-mschapv2 plugin
actually loaded? Are the DES and MD4 algorithms available? Are any
errors logged during startup?
Regards,
Tobias
__
Hi Tobias,
Many thanks for your help.
No I don't have any error on the startup
sudo ipsec restart
Stopping strongSwan IPsec...
Starting strongSwan 5.2.1 IPsec [starter]...
!! Your strongswan.conf contains manual plugin load options for charon.
!! This is recomm
Hi Christian,
> No I don't have any error on the startup
I was not referring to the console output. Did you check the log?
> !! Your strongswan.conf contains manual plugin load options for
> charon.
> !! This is recommended for experts only, see
> !! http://wiki.stro
Hi Tobias,
Great help.
I will compile strongswan on raspberry and will revert to you.
Merci
Christian
Message d'origine
De: Tobias Brunner
Envoyé: jeudi 14 juillet 2016 11:23
À: Christian Klugesherz
Cc: Users@lists.strongswan.org
Objet: Re: [strongSwan] VPN with preshared Key be
ian
>
>
> Message d'origine
> De: Tobias Brunner
> Envoyé: jeudi 14 juillet 2016 11:23
> À: Christian Klugesherz
> Cc: Users@lists.strongswan.org
> Objet: Re: [strongSwan] VPN with preshared Key between BB10 and Raspberry-Pi
>
> Hi Christian,
>
>> No I d
l compile strongswan on raspberry and will revert to you.
>>
>> Merci
>>
>> Christian
>>
>>
>> Message d'origine
>> De: Tobias Brunner
>> Envoyé: jeudi 14 juillet 2016 11:23
>> À: Christian Klugesherz
>> Cc: Users@lists.strongsw
Hi Christian,
> 16[CFG] looking for peer configs matching
> 192.168.1.29[%any]...80.12.51.163[alice]
> 16[CFG] selected peer config 'BB10'
> 16[IKE] peer requested EAP, config inacceptable
> 16[CFG] no alternative config found
Sounds like the authentication settings of your config are wrong. Do
Hi Tobias,
Thank you for your prompt answer.
As highlighted in the same topic : rightauth=eap-mschapv2 (See below)
I will test this evening by adding eap_identity=%any, and will revert to you.
Please let me know if you should observe a typo in my config, which
should not fulfill strongSwan's reco
Hi Christian,
> As highlighted in the same topic : rightauth=eap-mschapv2 (See below)
Your log indicates otherwise, though. Check `ipsec statusall` for the
correct authentication method for the BB10 connection, or increase the
log level for cfg to 2 to see details when the config is loaded.
> P
Hi Tobias,
Below the result I got by activating the loglevel "cfg 2"
Please to share what I have to fix ?
Many Thanks in advance
Regards
Christian
Jul 18 16:04:48 raspberrypi charon: 00[DMN] Starting IKE charon daemon
(strongSwan 5.5.0, Linux 4.4.13+, armv6l)
Jul 18 16:04:49 raspberrypi charon
Hi Christian,
> Below the result I got by activating the loglevel "cfg 2"
You set it via stroke, which is a bit late as some of the interesting
bits would have been the messages after "received stroke: add connection
'BB10'", which list the settings of the loaded config. Either set the
log level
Hi Tobias,
I really appreciate your help
Below the syslog by setting cfg=2 in /etc/ipsec.conf
Nevertheless, by removing: `eap_identity` I got the same result.
On basis, I wanted to use StrongSwan as simple as possible without
certificates CA.
Does that mean that in any case, you have to set-up a
Hi Christian,
> Nevertheless, by removing: `eap_identity` I got the same result.
You might need it, but that depends on the client.
> On basis, I wanted to use StrongSwan as simple as possible without
> certificates CA.
That probably won't work as authenticating clients with EAP requires
authen
Hi Tobias,
Many thanks for your help.
I'm sorry that I consume your time.
(I'm a not IPSec expert, even I've spent now weeks reading docs.)
I must confess that it is really-really difficult to integrate all
these information, between - configurations files -CA, different SAs -
Device, ...
So many
Hi Christian,
> Configuration on my BB10.
> Profile Name : home
> Server Address : 78.229.20.105
> Gateway Type : Generic IKEv2 VPN Server
> Authentication Type : EAP-MSCHAPv2
> Authentication ID Type : email
> ID Authentication: alice(n
Hi Tobias,
There is some progress now :-)
(Also Meantime some help from Yuri )
I'm now getting following in syslog (see below) with
# /etc/ipsec.conf - strongSwan IPsec configuration file
config setup
charondebug="ike 1, cfg 2"
conn %default
ikelifetime=60m
keylife=20m
rekeymargi
Hi Christian,
> Jul 20 13:26:26 raspberrypi charon: 13[IKE] EAP-MS-CHAPv2 verification
> failed, retry (1)
You might want do double and triple check that you configured the
password exactly the same on both sides.
Regards,
Tobias
___
Users mailing lis
Hi Tobias,
BINGO 😀 😀 😀 😀
It is working : 😀
I double checked , yes something was also wrong with my password... after
so many different attempts.
Many many many thanks to you
Also Many Many Thanks to Yuri
Really Really appreciated all your help
Vielen Vielen Vielen Dank !
With my best Regards
19 matches
Mail list logo
