I am trying to configure my client using VPN (strongswan) to access the remote server whose DNS is vpngw.fh-kempten.de
Details of my remote VPN Server are: Authentication Method = Mutual +XAuth PSK =****
Phase 1 Exchange Type = aggressive DH exchange = group2 Cipher Algorithm = 3ds Hash Algorithm = md5 Key life time limit = 28800secs
Phase 2 Tensform Algorithm = esp-3des HMAC Algorithm = md5 PFC exchange = Auto compress Algorithm = disabled Key life time limit = 28800secs
Host Name or IP = vpngw.fh-kempten.de port = 500 Auto configuration = IKE conf. pull MTU = 1400 Adapter mode = use a virtual adapter and assigned address
Client firewall options NAT traversal = enable NAT traversal port = 4500 Keep alive packet rate = 15s IKE fragmentation = enable Maximum packet siye = 540 bytes
This is all info I have related to my VPN Server which is a remote server.
Using the command
sudo ipsec up ikev1-psk-xauth, I try to run my client VPN. I get the following error in my raspberry pi
initiating Aggressive Mode IKE_SA ikev1-psk-xauth to 22.214.171.124 generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ] sending packet: from 192.168.60.96 to 126.96.36.199 (363 bytes) received packet: from 188.8.131.52 to 192.168.60.96 (404 bytes) parsed AGGRESSIVE response 0 [ SA KE No ID HASH V V V NAT-D NAT-D V V ] received Cisco Unity vendor ID received XAuth vendor ID received draft-ietf-ipsec-nat-t-ike-02\n vendor ID received FRAGMENTATION vendor ID received unknown vendor ID: 1f:07:f7:0e:aa:65:14:d3:b0:fa:96:54:2a:50:01:00 IDir '184.108.40.206' does not match to 'vpngw.fh-kempten.de' generating INFORMATIONAL_V1 request 304912695 [ N(INVAL_ID) ] sending packet: from 192.168.60.96 to 220.127.116.11 (56 bytes) establishing connection 'ikev1-psk-xauth' failed
Following is my ipsec.conf file
config setup conn ikev1-psk-xauth ikelifetime=28800s keylife=20m rekeymargin=3m keyingtries=1 keyexchange=ikev1 authby=secret ike = 3des-md5-modp1024! esp = 3des-md5-modp1024! modeconfig = pull aggressive = yes fragmentation=yes #keyexchange = ikev2 authby = secret type = transport leftauth = psk leftauth2 = xauth leftprotoport=17/1701 rightprotoport=17/1701 right = vpngw.fh-kempten.de rightauth = psk rightauth2 = xauth auto = add
My motivation is to access the shared drives which are present on the remote VPN server. Any suggestions would be highly appreciated. Thanks in advance!!