Strongswan creating client to server connection VPN
0
votes
0
answers
1307
views
I'm having problems with my client-to-server config.
I only edited this file /etc/ipsec.conf
I can only edit this file on Client side, but not server side. On server I have an interface program where I can create certs and other stuff.
config setup
charondebug="all"
uniqueids=yes
conn devgateway-to-prodgateway
type=tunnel
auto=start
keyexchange=ikev2
authby=rsasig
left=externalIP-A
leftsubnet=InternalIP-A/24
leftcert=myServerPem.pem
right=ExternalIP-B
rightsubnet=InternalIP-B/24
rightcert=myServerPem.pem (downloaded this cert, created by my server)
ike=aes256-sha1-modp1024!
esp=aes256-sha1-modp1024!
aggressive=no
keyingtries=%forever
ikelifetime=36000s
lifetime=10800s
dpddelay=30s
dpdtimeout=120s
dpdaction=restart
I can ping from my A client to B server IP, but when using status
I receive the next message:
Security Associations (0 up, 1 connecting):
devgateway-to-prodgateway: CONNECTING, ExternalIp-A[%any]...ExternalIp-B[%any]
So it's not properly working as desired.
Any suggestions?
Asked by genius
(1 rep)
Apr 26, 2022, 07:23 AM