Hi Gowrishankar Thanks. I am now able to create the log file. However, I do not see any error in the logs.
Best Regards Anupam Malhotra -----Original Message----- From: gowrishankar [mailto:[email protected]] Sent: Friday, December 23, 2011 3:54 PM To: Anupam Malhotra Cc: [email protected] Subject: Re: [strongSwan] Telnet over a tunnel using Local IP (rather than Public IP) On Friday 23 December 2011 03:47 PM, Anupam Malhotra wrote: > Hi Thomas > > The IKE_SA-negotiation is not failing. The tunnel is coming up. Only issue > is that the local IP is being seen at the remote end (rather than the public > IP). > > @Gowrishankar: I added the below snippet in strongsan.conf. But I do not see > /var/log/charon.log getting created. Is there anything else that needs to be > done so that this log file is created? > Hope you are running with charonstart=yes in ipsec.conf. Some more info abt logger in http://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration Can you check if this helps ? But I could able to see ipsec creating charon.log in /var/log/ with this option (as in link). Thanks, Gowri Shankar > Best Regards > Anupam Malhotra > > > -----Original Message----- > From: gowrishankar [mailto:[email protected]] > Sent: Friday, December 23, 2011 3:20 PM > To: Anupam Malhotra > Cc: Thomas Egerer; [email protected] > Subject: Re: [strongSwan] Telnet over a tunnel using Local IP (rather than > Public IP) > > On Friday 23 December 2011 03:12 PM, Thomas Egerer wrote: >> On 12/23/2011 09:40 AM, Anupam Malhotra wrote: >>> Hi Thomas >>> >>> I did try "left=xp.xp.xp.xp". In that case, even the tunnel is not >>> established. Is there anything else which I can try here? >> Make sure that right on your cloud-server is xp.xp.xp.xp, too or >> %any. If that doesn't do the trick, why don't you post the config >> files on both of the servers and append the logs of the failed >> IKE_SA-negotiation. >> > BTW, can you also try to check if charon.log shows any interesting error ? > If strongswan.conf does not have filelog, you can try below one > and share your findings (imp errors). > > filelog { > /var/log/charon.log { > # add a timestamp prefix > time_format = %b %e %T > > # loggers to files also accept the append option to open > files in > # append mode at startup (default is yes) > append = no > > # the default loglevel for all daemon subsystems (defaults > to 1). > default = 4 > > # flush each line to disk > flush_line = yes > > } > default = 4 > > # prepend connection name, simplifies grepping > ike_name = yes > } > } > > > Thanks, > Gowri Shankar >> Cheers >> Thomas >> >> >> >> _______________________________________________ >> Users mailing list >> [email protected] >> https://lists.strongswan.org/mailman/listinfo/users > _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
