LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 11-21-2012, 07:01 AM   #1
loesprite
LQ Newbie
 
Registered: Nov 2012
Posts: 2

Rep: Reputation: Disabled
Lightbulb IKE_SA_INIT failed with StrongSwan Site to Site VPN between different amazon VPCs


Hi friends,

I have 2 VPCs in different amazon az. That's like 2 office in different city. For data transfer reasons, I want to setup an IPSec VPN tunnel between them.

So I created 2 clean Ubuntu instances and installed StrongSwan with apt-get. I changed the 3 configuration files - ipsec.conf, ipsec.secret and strongswan.conf according to the example here http://www.strongswan.org/uml/testre...2/net2net-psk/.

When I run 'sudo ipsec up net-net' on one of the Ubuntu server, I see things below:

**********************************************************************
ubuntu@City1:~$ sudo ipsec up net-net

initiating IKE_SA net-net[1] to y.y.y.y
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
sending packet: from x.x.x.x[500] to y.y.y.y[500]
retransmit 1 of request with message ID 0
sending packet: from x.x.x.x[500] to y.y.y.y[500]
retransmit 2 of request with message ID 0
sending packet: from x.x.x.x[500] to y.y.y.y[500]
retransmit 3 of request with message ID 0
sending packet: from x.x.x.x[500] to y.y.y.y[500]
retransmit 4 of request with message ID 0
sending packet: from x.x.x.x[500] to y.y.y.y[500]
retransmit 5 of request with message ID 0
sending packet: from x.x.x.x[500] to y.y.y.y[500]
giving up after 5 retransmits
establishing IKE_SA failed, peer not responding
**********************************************************************

I'm sure that the firewall is opened for the connection. I also ran tcpdump to monitor the traffic. But I saw nothing on each side.

Any ideas?
 
Old 11-21-2012, 11:43 PM   #2
loesprite
LQ Newbie
 
Registered: Nov 2012
Posts: 2

Original Poster
Rep: Reputation: Disabled
Please

Could anyone help me?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Configuring Site to SIte VPN on Linux Machine to any Firewall anandnenwani Linux - Newbie 3 09-04-2012 12:00 PM
site to site vpn between vyatta and zywall framacomputer Linux - Networking 5 06-06-2011 02:55 PM
Site to Site VPN Cisco Router karnac01 Linux - Networking 3 09-14-2010 09:55 PM
site to site vpn racoon with cisco asa 5505 routing issues wastingtime Linux - Networking 1 04-02-2010 12:26 PM
Site to Site VPN - Internet browsing bence8810 Linux - Networking 2 04-19-2008 11:56 AM


All times are GMT -5. The time now is 03:31 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration