Closed juanluis-lightneer closed 4 years ago
In the Windows instructions it says to modify AssumeUDPEncapsulationContextOnSendRule
in the registry, so you could try the equivalent by enabling the Enforce UDP encapsulation checkbox in the IPsec settings dialog.
It is not completing the Phase 1 (main mode) for some reason, even though it accepted a proposal.
I'm not sure which linux distro or strongswan version you are using. If you are using Ubuntu, could you try the much newer network-manager-l2tp from the following PPA:
You could try switching from strongswan to libreswan and see if it makes a difference. But don't try with libreswan >= 3.30 as it won't work with the 3des-sha1-mopp1024 phase 1 proposal as it is no longer built with DH2 (modp1024) support.
@dkosovic Sorry for the delay, I had this notification in work mail account and just saw it. I am sorry I forgot to mention my system too, I use ArchLinux (updated as today) and strongswan 5.8.2. Following your advice I managed to get it to connect, I had to compile through Arch AUR and specify older libreswan version. After tweaking a couple of parameters in NetworkManager it worked. Thank you so much!
Hello, I am having some issues connecting to my companies router. I can connect from windows and from android phone though. We use PSK and this is the info I got to connect This is what I see in the journal
Any ideas on what can be the problem? (is there any other log I can include?)