Sample Header Ad - 728x90

Strongswan creating client to server connection VPN

0 votes
0 answers
1307 views
I'm having problems with my client-to-server config. I only edited this file /etc/ipsec.conf I can only edit this file on Client side, but not server side. On server I have an interface program where I can create certs and other stuff.
config setup
        charondebug="all"
        uniqueids=yes
conn devgateway-to-prodgateway
        type=tunnel
        auto=start
        keyexchange=ikev2
        authby=rsasig
        left=externalIP-A
        leftsubnet=InternalIP-A/24
        leftcert=myServerPem.pem
        right=ExternalIP-B
        rightsubnet=InternalIP-B/24
        rightcert=myServerPem.pem (downloaded this cert, created by my server)
        ike=aes256-sha1-modp1024!
        esp=aes256-sha1-modp1024!
        aggressive=no
        keyingtries=%forever
        ikelifetime=36000s
        lifetime=10800s
        dpddelay=30s
        dpdtimeout=120s
        dpdaction=restart
I can ping from my A client to B server IP, but when using
status
I receive the next message:
Security Associations (0 up, 1 connecting):
devgateway-to-prodgateway: CONNECTING, ExternalIp-A[%any]...ExternalIp-B[%any]
So it's not properly working as desired. Any suggestions?
Asked by genius (1 rep)
Apr 26, 2022, 07:23 AM