Re: [strongSwan] cipher choice causing issue

2017-07-06 Thread Tobias Brunner
Hi Jamie, > One other issue - the client is actually a router, and NATed clients behind > it can’t seem to access the internet, although the client itself can. > Any thoughts? What do you mean? Access the Internet via VPN or locally? Perhaps [1] has some pointers for you. Regards, Tobias

Re: [strongSwan] cipher choice causing issue

2017-07-05 Thread Jamie Stuart
Thanks Tobias, I compiled the kernel with res-gcm support and it now works fine. One other issue - the client is actually a router, and NATed clients behind it can’t seem to access the internet, although the client itself can. Any thoughts? > On 5 Jul 2017, at 15:48, Tobias Brunner

Re: [strongSwan] cipher choice causing issue

2017-07-05 Thread Tobias Brunner
Hi Jamie, > Server is Ubuntu 17, Client LEDE trunk. Authentication happens, but I think > client and server cannot agree on an algorithm? They do, but the chosen algorithm (probably AES-GCM) apparently is not supported by the client's kernel: > 16[KNL] received netlink error: Function not

[strongSwan] cipher choice causing issue

2017-07-05 Thread Jamie Stuart
Hi, New user here. I’m having trouble with a Strongswan client/server connection, which I believe is due to the encryption algorithm choice. Server is Ubuntu 17, Client LEDE trunk. Authentication happens, but I think client and server cannot agree on an algorithm? if I leave the ike and esp off