About rjavgal

i got it to work for this topology - between 10.1.0.101 and 10.1.0.201 v2 worked for me , v1 implementation in SS seems to be flaky ike and ipsec crypto ike and ipsec crypto   Step1 :  Server side Config :    install and configure strongswan 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 sudo apt update && sudo apt upgrade -y sudo apt-get install strongswan          Set the following kernel parameters: cat >> /etc/sysctl.conf << EOF net.ipv4.ipforward =   1 net.ipv4.conf.all.acceptredirects =   0 net.ipv4.conf.all.send_redirects =   0   EOF   sysctl -p /etc/sysctl.conf   vi /etc/ipsec.conf   vi /etc/ipsec.secrets   vi /etc/ipsec.conf ipsec.conf root@rithvik-gpcs-client-1:/home/rithvik# cat /etc/ipsec.conf # ipsec.conf - strongSwan IPsec configuration file # basic configuration #config setup     # strictcrlpolicy=yes     # uniqueids = no # Add connections here. # Sample VPN connections #conn sample-self-signed #      leftsubnet=10.1.0.0/16 #      leftcert=selfCert.der #      leftsendcert=never #      right=192.168.0.2 #      rightsubnet=10.2.0.0/16 #      rightcert=peerCert.der #      auto=start #conn sample-with-ca-cert #      leftsubnet=10.1.0.0/16 #      leftcert=myCert.pem #      right=192.168.0.2 #      rightsubnet=10.2.0.0/16 #      rightid="C=CH, O=Linux strongSwan CN=peer name" #      auto=start # # # config setup         charondebug="all"         uniqueids=yes         strictcrlpolicy=no conn %default # connection to paris datacenter conn ubuntu-client-to-firewall #   leftid=10.1.0.101   leftsubnet=10.1.0.0/16   right=10.1.0.201   rightsubnet=10.1.0.0/16   ike=aes256-sha2_256-modp1024!   esp=aes256-sha2_256!   keyingtries=0   ikelifetime=1h   lifetime=8h   dpddelay=30   dpdtimeout=120   dpdaction=restart   authby=secret   auto=start   keyexchange=ikev2   type=tunnel root@rithvik-gpcs-client-1:/home/rithvik#     vi /etc/ipsec.secrets /etc/ipsec.secrets root@rithvik-gpcs-client-1:/home/rithvik# cat /etc/ipsec.secrets # This file holds shared secrets or RSA   private   keys   for   authentication. # RSA   private   key   for   this   host, authenticating it to any other host # which knows the   public   part. 10.1.0.101   10.1.0.201   : PSK   '123456' #PSK   "123456" root@rithvik-gpcs-client-1:/home/rithvik# ... View more