LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-21-2019, 04:42 AM   #1
Durga@84
LQ Newbie
 
Registered: Aug 2019
Posts: 10

Rep: Reputation: Disabled
No inbound SAD entry present in Racoon ipsec


Hi,

I am testing the racoon ipsec between two ubuntu machines. SPD is populated correctly, but In SAD, only outbound entry present, there is no inbound entry.

This is my ipsec-tools.conf file in one of my machines

## Flush the SAD and SPD
#
flush;
spdflush;

spdadd -6 2012::1 2012::2 any -P out ipsec
esp/transport//require;

spdadd -6 2012::2 2012::1 any -P in ipsec
esp/transport//require;

-------------------------------------------------
This is my racoon.conf file:
=============================
log notify;
path pre_shared_key "/etc/racoon/psk.txt";
#path certificate "/etc/racoon/certs";

remote 2012::2 {
exchange_mode main;
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group modp1024;
}
generate_policy off;
}

sainfo address 2012::1 any address 2012::2 any {
pfs_group modp768;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate

This is my preshared key file and I changed this file mode to 600
/etc/racoon/psk.txt

# IPv4/v6 addresses
2012::2 verysecret


While checking in SAD entries by using command setkey -D
only outbound entry found, no inbound entry.

Please help me to narrow the issue.

Thanks,
Durga K
 
Old 09-06-2019, 12:32 PM   #2
OliverS
LQ Newbie
 
Registered: Sep 2019
Posts: 2

Rep: Reputation: Disabled
Quote:
Originally Posted by Durga@84 View Post
Hi,

I am testing the racoon ipsec between two ubuntu machines. SPD is populated correctly, but In SAD, only outbound entry present, there is no inbound entry.

This is my ipsec-tools.conf file in one of my machines

## Flush the SAD and SPD
#
flush;
spdflush;

spdadd -6 2012::1 2012::2 any -P out ipsec
esp/transport//require;

spdadd -6 2012::2 2012::1 any -P in ipsec
esp/transport//require;

-------------------------------------------------
This is my racoon.conf file:
=============================
log notify; usps tracking
path pre_shared_key "/etc/racoon/psk.txt";
#path certificate "/etc/racoon/certs";

remote 2012::2 {
exchange_mode main;
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group modp1024;
}
generate_policy off;
}

sainfo address 2012::1 any address 2012::2 any {
pfs_group modp768;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate

This is my preshared key file and I changed this file mode to 600
/etc/racoon/psk.txt

# IPv4/v6 addresses
2012::2 verysecret


While checking in SAD entries by using command setkey -D
only outbound entry found, no inbound entry.

Please help me to narrow the issue.

Thanks,
Durga K
I am also facing the same issue here too. Help is appreciated.


Thanks in advance.
Regards,
Oliver

Last edited by OliverS; 09-11-2019 at 02:07 PM.
 
Old 09-06-2019, 10:05 PM   #3
Durga@84
LQ Newbie
 
Registered: Aug 2019
Posts: 10

Original Poster
Rep: Reputation: Disabled
Hi Oliver,

I did one configuration mistake. After removing that configuration, tunnel got established.

Please paste your configurations(both sid e onfigurations). I will check.

Regards,
Durga K
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: No, Microsoft: Your one billion Windows 10 goal is just sad ... really sad LXer Syndicated Linux News 0 07-31-2015 07:12 PM
Sad sad story, recovery help needed Roland1000 Linux - Hardware 2 02-23-2007 07:23 PM
Need help creating an IPSec/Racoon script s0n|k Linux - Networking 0 01-19-2007 09:09 AM
IPsec : Problem with racoon HaPagan Linux - Security 1 11-30-2005 12:23 AM
Sad sad news. Pauli General 6 04-13-2004 03:59 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:57 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration