<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Rescued from the Spam bucket. Please remember to subscribe to the mailing list before posting to it.<br class=""><div><br class=""><div class=""><span class="" style="font-family: -webkit-system-font, 'Helvetica Neue', Helvetica, sans-serif; color: rgb(127, 127, 127);"><b class="">From: </b></span><span class="" style="font-family: -webkit-system-font, 'Helvetica Neue', Helvetica, sans-serif;">Tai Shih Chau <<a href="mailto:shihchau@gen-x.com.my" class="">shihchau@gen-x.com.my</a>></span></div><div class=""><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">November 25, 2015 at 6:17:45 AM EST<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:users@lists.openswan.org" class="">users@lists.openswan.org</a><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">openswan ipsec on aws vpc ec2</b><br class=""></span></div><br class=""><br class=""><div dir="ltr" class=""><div class="">Hi</div><div class=""><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class=""><br class=""></p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">I am new in VPN. I would appreciate if anyone can help.</p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">My tunnel seems to be up but there is no traffic flow.<br class=""></p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">000 “digi”: <a href="http://192.168.16.116/32===192.168.16.73[54.169.89.219]" class="">192.168.16.116/32===192.168.16.73[54.169.89.219]</a>—192.168.16.1…203.92.128.197===<a href="http://192.100.86.0/24" class="">192.100.86.0/24</a>; erouted; eroute owner: #2</p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">I did a tcpdump and there is no response.<br class="">tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<br class="">listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes<br class="">19:08:36.122756 IP 192.168.16.116 > <a href="http://192.100.86.203/" class="">192.100.86.203</a>: ICMP echo request, id 17606, seq 1, length 64<br class="">19:08:37.122440 IP 192.168.16.116 > <a href="http://192.100.86.203/" class="">192.100.86.203</a>: ICMP echo request, id 17606, seq 2, length 64</p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">I did a ip xfrm monitor but don’t see any output no matter what I do.</p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">What could be wrong?</p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">My ipxfrm state:<br class="">src 203.92.128.197 dst 192.168.16.73<br class="">proto esp spi 0xf9a2ac00 reqid 16397 mode tunnel<br class="">replay-window 32 flag af-unspec<br class="">auth-trunc hmac(md5) 0x53ad2248979cd0377c5a65305bbf6981 96<br class="">enc cbc(des3_ede) 0x3930e67ea4f22cc4ff2ff4b6be083786c778b75243ab4b07<br class="">src 192.168.16.73 dst 203.92.128.197<br class="">proto esp spi 0xac408e6c reqid 16397 mode tunnel<br class="">replay-window 32 flag af-unspec<br class="">auth-trunc hmac(md5) 0x9bc5f21a34cca1b1adaf8f22e25dd739 96<br class="">enc cbc(des3_ede) 0x9bce4a07e5e36fe39270c298eaf5cbac59a3bff5cf2cef44</p><p style="margin:0px 0px 1em 95px;padding:0px;border:0px;font-stretch:inherit;font-size:14px;line-height:21px;font-family:'PT Sans',sans-serif;vertical-align:baseline;color:rgb(102,102,102)" class="">My xfrm policy:<br class="">src <a href="http://192.168.16.116/32" class="">192.168.16.116/32</a> dst <a href="http://192.100.86.0/24" class="">192.100.86.0/24</a><br class="">dir out priority 2088 ptype main<br class="">tmpl src 192.168.16.73 dst 203.92.128.197<br class="">proto esp reqid 16397 mode tunnel<br class="">src <a href="http://192.100.86.0/24" class="">192.100.86.0/24</a> dst <a href="http://192.168.16.116/32" class="">192.168.16.116/32</a><br class="">dir fwd priority 2088 ptype main<br class="">tmpl src 203.92.128.197 dst 192.168.16.73<br class="">proto esp reqid 16397 mode tunnel<br class="">src <a href="http://192.100.86.0/24" class="">192.100.86.0/24</a> dst <a href="http://192.168.16.116/32" class="">192.168.16.116/32</a><br class="">dir in priority 2088 ptype main<br class="">tmpl src 203.92.128.197 dst 192.168.16.73<br class="">proto esp reqid 16397 mode tunnel<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket out priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket in priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket out priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket in priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket out priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket in priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket out priority 0 ptype main<br class="">src <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" class="">0.0.0.0/0</a><br class="">socket in priority 0 ptype main</p><div class="" style="margin:10px 0px 0px;padding:0px 0px 5px;border-width:0px 0px 1px;border-bottom-style:solid;border-bottom-color:rgb(238,238,238);font-stretch:inherit;font-size:14px;line-height:23px;font-family:'PT Sans',sans-serif;vertical-align:baseline;overflow:hidden;width:583.391px;color:rgb(102,102,102)"><br class=""></div></div>
</div>
<br class=""><br class=""></div></div><br class=""></body></html>