Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:ipsec_strongswan_debian_11 [2024/12/31 13:00] – [Servizi] niccolo
+++ doc:appunti:linux:sa:ipsec_strongswan_debian_11 [2025/04/30 09:34] (current) – [File di configurazione] niccolo
@@ Line 63: / Line 63: @@
 <file>
-include /etc/ipsec.d/office1-office2.secrets.inc
+include /etc/ipsec.d/office1-office2.secret.inc
 </file>
@@ Line 75: / Line 75: @@
 </code>
-**ATTENZIONE** In **Debian 10** il servizio da avviare si chiamava **strongswan.service**.
+:!: **ATTENZIONE** In **Debian 10** il servizio da avviare si chiamava **strongswan.service**.
+===== Debug =====
+<code>
+ipsec statusall
+</code>
+Dovrebbe produrre qualcosa del genere:
+<code>
+...
+Connections:
+office1-office2:  145.18.51.38...15.125.28.13  IKEv2, dpddelay=30s
+office1-office2:   local:  [145.18.51.38] uses pre-shared key authentication
+office1-office2:   remote: [15.125.28.13] uses pre-shared key authentication
+office1-office2:   child:  192.168.30.0/24 === 192.168.100.0/24 TUNNEL, dpdaction=restart
+Security Associations (1 up, 0 connecting):
+office1-office2[1]: ESTABLISHED 42 minutes ago,
+.18.51.38[145.18.51.38]...15.125.28.13[15.125.28.13]
+...
+</code>
+Questi i processi che devono risultare in esecuzione:
+<code>
+ps uax | grep charon
+</code>
+<code>
+... /usr/lib/ipsec/starter --daemon charon --nofork
+... /usr/lib/ipsec/charon --debug-dmn 2 --debug-mgr 2 --debug-ike 2 --debug-chd 2
+</code>