Hi Filip, since you set up an IP route policy in the kernel, the first IP packet from the 192.168.3.0/26 subnet with destination 10.2.0.0/24 will trigger the IKEv2 negotiation an set up the active tunnel.
Regards Andreas On 06.04.2017 13:06, Filip Maroul wrote: > Hello today I start configuring strangswan as net2net witj IKEv2. I > think everything works so far and heve this ipsec statusall: > > Status of IKE charon daemon (strongSwan 5.2.1, Linux 3.16.0-4-amd64, > x86_64): > uptime: 17 minutes, since Apr 06 11:09:15 2017 > malloc: sbrk 1462272, mmap 0, used 298784, free 1163488 > worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, > scheduled: 0 > loaded plugins: charon aes rc2 sha1 sha2 md5 random nonce x509 > revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey > pem openssl fips-prf gmp agent xcbc hmac gcm attr kernel-netlink resolve > socket-default stroke updown > Listening IP addresses: > 192.168.100.200 > 192.168.3.59 > Connections: > net-net: 192.168.100.200...192.168.101.154 IKEv2 > net-net: local: [neptun.test.local] uses pre-shared key > authentication > net-net: remote: [pluto.test.local] uses pre-shared key > authentication > net-net: child: 192.168.3.0/26 === 10.2.0.0/24 TUNNEL > Routed Connections: > net-net{1}: ROUTED, TUNNEL > net-net{1}: 192.168.3.0/26 === 10.2.0.0/24 > Security Associations (0 up, 0 connecting): > none > > Problem is I have no SA Associations. > > > I attach conf file from both sites. I have strongswan 5.2.1 on Debian 8 x64 > > Thank you for any help. > > -- ====================================================================== Andreas Steffen andreas.stef...@strongswan.org strongSwan - the Open Source VPN Solution! www.strongswan.org Institute for Networked Solutions HSR University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[INS-HSR]==
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users