Page MenuHomeVyOS Platform

L2TP/IPsec VPN no longer working
Closed, ResolvedPublicBUG

Description

charon: 10[NET] received packet: from xx.xx.130.179[31626] to xx.xx.234.19[500] (788 bytes)
charon: 10[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V V ]
charon: 10[IKE] no IKE config found for xx.xx.234.19...xx.xx.130.179, sending NO_PROPOSAL_CHOSEN
charon: 10[ENC] generating INFORMATIONAL_V1 request 2989585626 [ N(NO_PROP) ]
charon: 10[NET] sending packet: from xx.xx.234.19[500] to xx.xx.130.179[31626] (40 bytes)
charon: 09[NET] received packet: from xx.xx.130.179[31626] to xx.xx.234.19[500] (788 bytes)
charon: 09[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V V ]
charon: 09[IKE] no IKE config found for xx.xx.234.19...xx.xx.130.179, sending NO_PROPOSAL_CHOSEN
charon: 09[ENC] generating INFORMATIONAL_V1 request 2828423180 [ N(NO_PROP) ]
charon: 09[NET] sending packet: from xx.xx.234.19[500] to xx.xx.130.179[31626] (40 bytes)
charon: 12[NET] received packet: from xx.xx.130.179[31626] to xx.xx.234.19[500] (788 bytes)
charon: 12[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V V ]
charon: 12[IKE] no IKE config found for xx.xx.234.19...xx.xx.130.179, sending NO_PROPOSAL_CHOSEN
charon: 12[ENC] generating INFORMATIONAL_V1 request 2665229584 [ N(NO_PROP) ]
charon: 12[NET] sending packet: from xx.xx.234.19[500] to xx.xx.130.179[31626] (40 bytes)
charon: 11[NET] received packet: from xx.xx.130.179[31626] to xx.xx.234.19[500] (788 bytes)
charon: 11[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V V ]
charon: 11[IKE] no IKE config found for xx.xx.234.19...xx.xx.130.179, sending NO_PROPOSAL_CHOSEN
charon: 11[ENC] generating INFORMATIONAL_V1 request 2598207803 [ N(NO_PROP) ]
charon: 11[NET] sending packet: from xx.xx.234.19[500] to xx.xx.130.179[31626] (40 bytes)
ii  strongswan-charon                5.6.2-2                                               amd64        strongSwan Internet Key Exchange daemon
ii  strongswan-libcharon             5.6.2-2                                               amd64        strongSwan charon library

Details

Difficulty level
Unknown (require assessment)
Version
1.2.0-rolling+201806010337
Why the issue appeared?
Will be filled on close

Event Timeline

No amount of messing up with the config in 5.6 fixed this, but when I downgraded strongswan to 5.2 (from stretch-security), it just worked. I'm downgrading it in the repositories.

Downgraded packages are in the latest nightly build.

Working again with 1.2.0-rolling+201806020337

ii  strongswan-charon                5.5.1-4+deb9u1                                        amd64        strongSwan Internet Key Exchange daemon
ii  strongswan-libcharon             5.5.1-4+deb9u1                                        amd64        strongSwan charon library
syncer triaged this task as Normal priority.Jun 3 2018, 8:24 AM