Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to connect two pc's using IPsec and StrongSwan.
The first pc, which I want it to be the server runs openSUSE and the client pc runs Fedora. So after installing StrongSwan in the first pc what kind of test can i do to see if there is a tunnel between the client and the server? For example could I send a file from the client to the server, apart from just ping one another.

share|improve this question
up vote 1 down vote accepted

If you have full access to the server box, the best thing you can do is to check that traffic from the client arrives from the correct interface. Something like:

tcpdump -i <ipsec-interface> -n

You should see traffic from the client here.

UPDATE: Similarly, traffic from the server should arrive on the client through its IPSec interface and can be inspected with tcpdump there.

share|improve this answer

ping should be enough for tunnel mode. try to look for this:

tcpdump -i <ipsec-interface> -n 'esp or udp port 500 or udp port 4500'
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.