configuring vpn with strongswan
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}
I need to do a vpn site-to-site, the company to integrate with gave me these params.
Gateway : 41.xxx.xx.xx
Host IP : 41.xxx.x.xx port xxxx
Transform set : esp-aes-256 esp-md5-hmac
Pre-shared key : xxxxxxxxxxxxxxxxxxxxxxx
I have configured Strongswan http://www.strongswan.org. but unfortunately I CANT get it to work.
have anyone done this before?
Thanks.
edited........................................
this is my auth.log
May 11 21:23:52 li348-231 sshd[3000]: Connection closed by 58.108.232.7 [preauth]
May 11 21:24:05 li348-231 sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:07 li348-231 sshd[3012]: Failed password for root from 60.173.14.143 port 39095 ssh2
May 11 21:24:10 li348-231 sshd[3012]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:24:13 li348-231 sshd[3015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:15 li348-231 sshd[3015]: Failed password for root from 60.173.14.143 port 41129 ssh2
May 11 21:24:15 li348-231 sshd[3015]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session closed for user root
May 11 21:26:21 li348-231 ipsec_starter[3021]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:26:21 li348-231 ipsec_starter[3040]: charon (3041) started after 20 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: charon stopped after 200 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: ipsec starter stopped
May 11 21:29:50 li348-231 ipsec_starter[3204]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:29:50 li348-231 ipsec_starter[3225]: charon (3226) started after 20 ms
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session closed for user root
edit to add the tail -f /var/log/syslog output
May 12 09:02:06 li348-231 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
May 12 09:02:06 li348-231 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
May 12 09:02:06 li348-231 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
May 12 09:02:06 li348-231 charon: 00[CFG] loaded IKE secret for @blinks.com @ccxtnm.net
May 12 09:02:06 li348-231 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity eap-mschapv2 addrblock
May 12 09:02:06 li348-231 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
May 12 09:02:06 li348-231 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
May 12 09:02:06 li348-231 charon: 00[JOB] spawning 16 worker threads
May 12 09:02:06 li348-231 charon: 10[CFG] received stroke: add connection 'net-net'
May 12 09:02:06 li348-231 charon: 10[CFG] added configuration 'net-net'
vpn
asked May 7 '15 at 11:57
binkabirbinkabir
612
add a comment |
I need to do a vpn site-to-site, the company to integrate with gave me these params.
Gateway : 41.xxx.xx.xx
Host IP : 41.xxx.x.xx port xxxx
Transform set : esp-aes-256 esp-md5-hmac
Pre-shared key : xxxxxxxxxxxxxxxxxxxxxxx
I have configured Strongswan http://www.strongswan.org. but unfortunately I CANT get it to work.
have anyone done this before?
Thanks.
edited........................................
this is my auth.log
May 11 21:23:52 li348-231 sshd[3000]: Connection closed by 58.108.232.7 [preauth]
May 11 21:24:05 li348-231 sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:07 li348-231 sshd[3012]: Failed password for root from 60.173.14.143 port 39095 ssh2
May 11 21:24:10 li348-231 sshd[3012]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:24:13 li348-231 sshd[3015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:15 li348-231 sshd[3015]: Failed password for root from 60.173.14.143 port 41129 ssh2
May 11 21:24:15 li348-231 sshd[3015]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session closed for user root
May 11 21:26:21 li348-231 ipsec_starter[3021]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:26:21 li348-231 ipsec_starter[3040]: charon (3041) started after 20 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: charon stopped after 200 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: ipsec starter stopped
May 11 21:29:50 li348-231 ipsec_starter[3204]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:29:50 li348-231 ipsec_starter[3225]: charon (3226) started after 20 ms
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session closed for user root
edit to add the tail -f /var/log/syslog output
May 12 09:02:06 li348-231 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
May 12 09:02:06 li348-231 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
May 12 09:02:06 li348-231 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
May 12 09:02:06 li348-231 charon: 00[CFG] loaded IKE secret for @blinks.com @ccxtnm.net
May 12 09:02:06 li348-231 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity eap-mschapv2 addrblock
May 12 09:02:06 li348-231 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
May 12 09:02:06 li348-231 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
May 12 09:02:06 li348-231 charon: 00[JOB] spawning 16 worker threads
May 12 09:02:06 li348-231 charon: 10[CFG] received stroke: add connection 'net-net'
May 12 09:02:06 li348-231 charon: 10[CFG] added configuration 'net-net'
vpn
asked May 7 '15 at 11:57
binkabirbinkabir
612
You need to provide more information to let someone help you. Can you provide logs from /var/log/syslog and /var/log/auth.log? and what version of strongswan and ubuntu are you using?
– Faisal
May 11 '15 at 17:56
Hi Faisal, thanks for the concern. this is my log from auth.log
– binkabir
May 11 '15 at 21:38
There are only 4 entries related to strongswan (named 'charon') in this log data and they too are related to starting and stopping of the strongswan server. You should run 'sudo tail -f /var/log/syslog' on your server and then try to connect to the VPN server. The 'tail -f' command will show you the new events being logged in the syslog . You are very likely to find the problem you are facing in those logs.
– Faisal
May 11 '15 at 21:58
add a comment |
I need to do a vpn site-to-site, the company to integrate with gave me these params.
Gateway : 41.xxx.xx.xx
Host IP : 41.xxx.x.xx port xxxx
Transform set : esp-aes-256 esp-md5-hmac
Pre-shared key : xxxxxxxxxxxxxxxxxxxxxxx
I have configured Strongswan http://www.strongswan.org. but unfortunately I CANT get it to work.
have anyone done this before?
Thanks.
edited........................................
this is my auth.log
May 11 21:23:52 li348-231 sshd[3000]: Connection closed by 58.108.232.7 [preauth]
May 11 21:24:05 li348-231 sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:07 li348-231 sshd[3012]: Failed password for root from 60.173.14.143 port 39095 ssh2
May 11 21:24:10 li348-231 sshd[3012]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:24:13 li348-231 sshd[3015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:15 li348-231 sshd[3015]: Failed password for root from 60.173.14.143 port 41129 ssh2
May 11 21:24:15 li348-231 sshd[3015]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session closed for user root
May 11 21:26:21 li348-231 ipsec_starter[3021]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:26:21 li348-231 ipsec_starter[3040]: charon (3041) started after 20 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: charon stopped after 200 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: ipsec starter stopped
May 11 21:29:50 li348-231 ipsec_starter[3204]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:29:50 li348-231 ipsec_starter[3225]: charon (3226) started after 20 ms
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session closed for user root
edit to add the tail -f /var/log/syslog output
May 12 09:02:06 li348-231 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
May 12 09:02:06 li348-231 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
May 12 09:02:06 li348-231 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
May 12 09:02:06 li348-231 charon: 00[CFG] loaded IKE secret for @blinks.com @ccxtnm.net
May 12 09:02:06 li348-231 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity eap-mschapv2 addrblock
May 12 09:02:06 li348-231 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
May 12 09:02:06 li348-231 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
May 12 09:02:06 li348-231 charon: 00[JOB] spawning 16 worker threads
May 12 09:02:06 li348-231 charon: 10[CFG] received stroke: add connection 'net-net'
May 12 09:02:06 li348-231 charon: 10[CFG] added configuration 'net-net'
vpn
asked May 7 '15 at 11:57
binkabirbinkabir
612
I need to do a vpn site-to-site, the company to integrate with gave me these params.
Gateway : 41.xxx.xx.xx
Host IP : 41.xxx.x.xx port xxxx
Transform set : esp-aes-256 esp-md5-hmac
Pre-shared key : xxxxxxxxxxxxxxxxxxxxxxx
I have configured Strongswan http://www.strongswan.org. but unfortunately I CANT get it to work.
have anyone done this before?
Thanks.
edited........................................
this is my auth.log
May 11 21:23:52 li348-231 sshd[3000]: Connection closed by 58.108.232.7 [preauth]
May 11 21:24:05 li348-231 sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:07 li348-231 sshd[3012]: Failed password for root from 60.173.14.143 port 39095 ssh2
May 11 21:24:10 li348-231 sshd[3012]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:24:13 li348-231 sshd[3015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.173.14.143 user=root
May 11 21:24:15 li348-231 sshd[3015]: Failed password for root from 60.173.14.143 port 41129 ssh2
May 11 21:24:15 li348-231 sshd[3015]: Received disconnect from 60.173.14.143: 11: Normal Shutdown, Thank you for playing [preauth]
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:25:01 li348-231 CRON[3018]: pam_unix(cron:session): session closed for user root
May 11 21:26:21 li348-231 ipsec_starter[3021]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:26:21 li348-231 ipsec_starter[3040]: charon (3041) started after 20 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: charon stopped after 200 ms
May 11 21:29:47 li348-231 ipsec_starter[3040]: ipsec starter stopped
May 11 21:29:50 li348-231 ipsec_starter[3204]: Starting strongSwan 5.1.2 IPsec [starter]...
May 11 21:29:50 li348-231 ipsec_starter[3225]: charon (3226) started after 20 ms
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session opened for user root by (uid=0)
May 11 21:35:01 li348-231 CRON[3310]: pam_unix(cron:session): session closed for user root
edit to add the tail -f /var/log/syslog output
May 12 09:02:06 li348-231 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
May 12 09:02:06 li348-231 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
May 12 09:02:06 li348-231 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
May 12 09:02:06 li348-231 charon: 00[CFG] loaded IKE secret for @blinks.com @ccxtnm.net
May 12 09:02:06 li348-231 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity eap-mschapv2 addrblock
May 12 09:02:06 li348-231 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
May 12 09:02:06 li348-231 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
May 12 09:02:06 li348-231 charon: 00[JOB] spawning 16 worker threads
May 12 09:02:06 li348-231 charon: 10[CFG] received stroke: add connection 'net-net'
May 12 09:02:06 li348-231 charon: 10[CFG] added configuration 'net-net'
vpn
vpn
asked May 7 '15 at 11:57
binkabirbinkabir
612
asked May 7 '15 at 11:57
binkabirbinkabir
612
edited May 12 '15 at 9:08
binkabir
asked May 7 '15 at 11:57
binkabirbinkabir
612
asked May 7 '15 at 11:57
binkabirbinkabir
612
asked May 7 '15 at 11:57
binkabirbinkabir
612
612
You need to provide more information to let someone help you. Can you provide logs from /var/log/syslog and /var/log/auth.log? and what version of strongswan and ubuntu are you using?
– Faisal
May 11 '15 at 17:56
Hi Faisal, thanks for the concern. this is my log from auth.log
– binkabir
May 11 '15 at 21:38
There are only 4 entries related to strongswan (named 'charon') in this log data and they too are related to starting and stopping of the strongswan server. You should run 'sudo tail -f /var/log/syslog' on your server and then try to connect to the VPN server. The 'tail -f' command will show you the new events being logged in the syslog . You are very likely to find the problem you are facing in those logs.
– Faisal
May 11 '15 at 21:58
add a comment |
You need to provide more information to let someone help you. Can you provide logs from /var/log/syslog and /var/log/auth.log? and what version of strongswan and ubuntu are you using?
– Faisal
May 11 '15 at 17:56
Hi Faisal, thanks for the concern. this is my log from auth.log
– binkabir
May 11 '15 at 21:38
There are only 4 entries related to strongswan (named 'charon') in this log data and they too are related to starting and stopping of the strongswan server. You should run 'sudo tail -f /var/log/syslog' on your server and then try to connect to the VPN server. The 'tail -f' command will show you the new events being logged in the syslog . You are very likely to find the problem you are facing in those logs.
– Faisal
May 11 '15 at 21:58
You need to provide more information to let someone help you. Can you provide logs from /var/log/syslog and /var/log/auth.log? and what version of strongswan and ubuntu are you using?
– Faisal
May 11 '15 at 17:56
You need to provide more information to let someone help you. Can you provide logs from /var/log/syslog and /var/log/auth.log? and what version of strongswan and ubuntu are you using?
– Faisal
May 11 '15 at 17:56
Hi Faisal, thanks for the concern. this is my log from auth.log
– binkabir
May 11 '15 at 21:38
Hi Faisal, thanks for the concern. this is my log from auth.log
– binkabir
May 11 '15 at 21:38
There are only 4 entries related to strongswan (named 'charon') in this log data and they too are related to starting and stopping of the strongswan server. You should run 'sudo tail -f /var/log/syslog' on your server and then try to connect to the VPN server. The 'tail -f' command will show you the new events being logged in the syslog . You are very likely to find the problem you are facing in those logs.
– Faisal
May 11 '15 at 21:58
There are only 4 entries related to strongswan (named 'charon') in this log data and they too are related to starting and stopping of the strongswan server. You should run 'sudo tail -f /var/log/syslog' on your server and then try to connect to the VPN server. The 'tail -f' command will show you the new events being logged in the syslog . You are very likely to find the problem you are facing in those logs.
– Faisal
May 11 '15 at 21:58
add a comment |
1 Answer
1
active
oldest
votes
You should provide the logs generated by StrongSwan server so that people may help you. Here's how you can find the logs related to your issue:
Start VPN server using:
sudo ipsec start
Once the VPN server is running, type the following command in your terminal to see what is happening on your machine:
sudo tail -f /var/log/syslog
This command lets you see events on your terminal as they are being logged into syslog.
Now try to connect from a VPN client. If the client can reach the server, you will see the events being logged in
syslogundercharonprocess. If you see nothing related tocharon, it is most probably a network connectivity issue.You can also use
sudo tail -x /var/log/syslog > debugfileto dump the lastxlines of syslog todebugfilefor better analysisPost those logs here if you are unable to identify the issue.
answered May 11 '15 at 22:19
FaisalFaisal
128111
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f620560%2fconfiguring-vpn-with-strongswan%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You should provide the logs generated by StrongSwan server so that people may help you. Here's how you can find the logs related to your issue:
Start VPN server using:
sudo ipsec start
Once the VPN server is running, type the following command in your terminal to see what is happening on your machine:
sudo tail -f /var/log/syslog
This command lets you see events on your terminal as they are being logged into syslog.
Now try to connect from a VPN client. If the client can reach the server, you will see the events being logged in
syslogundercharonprocess. If you see nothing related tocharon, it is most probably a network connectivity issue.You can also use
sudo tail -x /var/log/syslog > debugfileto dump the lastxlines of syslog todebugfilefor better analysisPost those logs here if you are unable to identify the issue.
answered May 11 '15 at 22:19
FaisalFaisal
128111
add a comment |
You should provide the logs generated by StrongSwan server so that people may help you. Here's how you can find the logs related to your issue:
Start VPN server using:
sudo ipsec start
Once the VPN server is running, type the following command in your terminal to see what is happening on your machine:
sudo tail -f /var/log/syslog
This command lets you see events on your terminal as they are being logged into syslog.
Now try to connect from a VPN client. If the client can reach the server, you will see the events being logged in
syslogundercharonprocess. If you see nothing related tocharon, it is most probably a network connectivity issue.You can also use
sudo tail -x /var/log/syslog > debugfileto dump the lastxlines of syslog todebugfilefor better analysisPost those logs here if you are unable to identify the issue.
answered May 11 '15 at 22:19
FaisalFaisal
128111
add a comment |
You should provide the logs generated by StrongSwan server so that people may help you. Here's how you can find the logs related to your issue:
Start VPN server using:
sudo ipsec start
Once the VPN server is running, type the following command in your terminal to see what is happening on your machine:
sudo tail -f /var/log/syslog
This command lets you see events on your terminal as they are being logged into syslog.
Now try to connect from a VPN client. If the client can reach the server, you will see the events being logged in
syslogundercharonprocess. If you see nothing related tocharon, it is most probably a network connectivity issue.You can also use
sudo tail -x /var/log/syslog > debugfileto dump the lastxlines of syslog todebugfilefor better analysisPost those logs here if you are unable to identify the issue.
answered May 11 '15 at 22:19
FaisalFaisal
128111
You should provide the logs generated by StrongSwan server so that people may help you. Here's how you can find the logs related to your issue:
Start VPN server using:
sudo ipsec start
Once the VPN server is running, type the following command in your terminal to see what is happening on your machine:
sudo tail -f /var/log/syslog
This command lets you see events on your terminal as they are being logged into syslog.
Now try to connect from a VPN client. If the client can reach the server, you will see the events being logged in
syslogundercharonprocess. If you see nothing related tocharon, it is most probably a network connectivity issue.You can also use
sudo tail -x /var/log/syslog > debugfileto dump the lastxlines of syslog todebugfilefor better analysisPost those logs here if you are unable to identify the issue.
answered May 11 '15 at 22:19
FaisalFaisal
128111
answered May 11 '15 at 22:19
FaisalFaisal
128111
answered May 11 '15 at 22:19
FaisalFaisal
128111
answered May 11 '15 at 22:19
FaisalFaisal
128111
128111
add a comment |
add a comment |
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f620560%2fconfiguring-vpn-with-strongswan%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
You need to provide more information to let someone help you. Can you provide logs from /var/log/syslog and /var/log/auth.log? and what version of strongswan and ubuntu are you using?
– Faisal
May 11 '15 at 17:56
Hi Faisal, thanks for the concern. this is my log from auth.log
– binkabir
May 11 '15 at 21:38
There are only 4 entries related to strongswan (named 'charon') in this log data and they too are related to starting and stopping of the strongswan server. You should run 'sudo tail -f /var/log/syslog' on your server and then try to connect to the VPN server. The 'tail -f' command will show you the new events being logged in the syslog . You are very likely to find the problem you are facing in those logs.
– Faisal
May 11 '15 at 21:58