[Openswan Users] Windows 7 IKEv2 no reaction at all

[Roland Plüss]

On 08/08/2011 09:01 PM, Paul Wouters wrote:
> On Sat, 6 Aug 2011, Roland Plüss wrote:
>
>> Trying to get the stupid windows 7 machine to connect to my openswan
>> server. Using version 2.6.29 (31 crashes) as W7
>> uses IKEv2. No matter what I try I get not the slightest reaction
>> from OpenSwan.
>
> We're at 2.6.35, so that's kinda old....
2.6.29 is the second-latest untested in GenToo. 2.6.31 the latest
untested. 2.6.31 crashes though if a connection is initiated so I had to
revert to 2.6.29 .
>
>> TCPDUMP:
>> root at server:~> tcpdump -i eth1 host 192.168.3.220
>> tcpdump: verbose output suppressed, use -v or -vv for full protocol
>> decode
>> listening on eth1, link-type EN10MB (Ethernet), capture size 68 bytes
>> 20:44:08.847654 IP 192.168.3.220.isakmp > 192.168.3.2.isakmp: [|isakmp]
>> 20:44:09.848820 IP 192.168.3.220.isakmp > 192.168.3.2.isakmp: [|isakmp]
>> 20:44:11.876885 IP 192.168.3.220.isakmp > 192.168.3.2.isakmp: [|isakmp]
>>
>> /var/log/everything/current shows no reaction at all. Not a single
>> line stating anything. I can connect with the same
>> machine using GenToo with OpenSwan 2.4.x installed.
>>
>> Any ideas what's going on? How the hell to get W7 to connect to
>> OpenSwan?
>
> This suggests that Win7 is not initiating anything. I guess you've
> setup a wrong policy
> that never matches? Is this supposed to be a stock l2tp/ipsec?
Using this Windows Agile VPN thing or how it is called hence pure IPSec
without l2tp. Used guides to set it up including a strongswan based one
which should be equal for the windows side. On the openswan side I use
the same conn I use for connecting using Un*x machines. Anything
particular one has to do there to get it working?

-- 
Yours sincerely
Plüss Roland

Leader and Head Programmer
- Game: Epsylon ( http://www.indiedb.com/games/epsylon ,
http://epsylon.rptd.ch )
- Game Engine: Drag[en]gine ( http://www.indiedb.com/engines/dragengine
, http://dragengine.rptd.ch )
- Normal Map Generator: DENormGen ( http://epsylon.rptd.ch/denormgen.php
) and others

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
Url : http://lists.openswan.org/pipermail/users/attachments/20110808/ba58a83f/attachment.bin