<div dir="ltr">I miss the last lines:<br><br>000 IPsec SAs: total(1), authenticated(1), anonymous(0)<br>000<br>000 #2: "windows":4500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE_IF_USED in 28012s; newest IPSEC; eroute owner; isakmp#1; idle; import:admin initiate<br>000 #2: "windows" <a href="mailto:esp.2363e820@192.0.2.236">esp.2363e820@192.0.2.236</a> <a href="mailto:esp.fa8bd25a@192.168.80.250">esp.fa8bd25a@192.168.80.250</a> ref=0 refhim=4294901761 Traffic: ESPin=0B ESPout=0B! ESPmax=4194303B<br>000 #1: "windows":4500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE_IF_USED in 2570s; newest ISAKMP; nodpd; idle; import:admin initiate<br>000<br>000 Bare Shunt list:<br>000<br><br><br></div><div class="gmail_extra"><br><div class="gmail_quote">2016-04-30 21:34 GMT-03:00 Sergio Belkin <span dir="ltr"><<a href="mailto:sebelk@gmail.com" target="_blank">sebelk@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">2016-04-30 13:30 GMT-03:00 Paul Wouters <span dir="ltr"><<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">vhost:%no,%priv </blockquote></div><br><br><br></div><div class="gmail_extra">I've followed your suggestion, and now I get:<span class=""><br><br>000 "windows":     oriented; my_ip=unset; their_ip=unset; mycert=hope.belkin.home<br>000 "windows":   xauth us:none, xauth them:none,  my_username=[any]; their_username=[any]<br>000 "windows":   modecfg info: us:none, them:none, modecfg policy:push, dns1:unset, dns2:unset, domain:unset, banner:unset;<br>000 "windows":   labeled_ipsec:no;<br>000 "windows":   policy_label:unset;<br>000 "windows":   CAs: 'DC=ar, DC=com, DC=vfc, CN=vfc-MS00009-CA'...'%any'<br></span>000 "windows":   ike_life: 3600s; ipsec_life: 28800s; replay_window: 32; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0;<span class=""><br>000 "windows":   retransmit-interval: 500ms; retransmit-timeout: 60s;<br>000 "windows":   sha2_truncbug:no; initial_contact:no; cisco_unity:no; fake_strongswan:no; send_vendorid:no;<br></span>000 "windows":   policy: RSASIG+ENCRYPT+DONT_REKEY+UP+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO;<span class=""><br>000 "windows":   conn_prio: 32,32; interface: wlp7s0; metric: 0; mtu: unset; sa_prio:auto; nflog-group: unset; mark: unset;<br></span>000 "windows":   newest ISAKMP SA: #1; newest IPsec SA: #2;<span class=""><br>000 "windows":   IKE algorithm newest: 3DES_CBC_192-SHA1-MODP1024<br>000 "windows":   ESP algorithm newest: AES_128-HMAC_SHA1; pfsgroup=<N/A><br>000<br>000 Total IPsec connections: loaded 3, active 1<br>000<br>000 State Information: DDoS cookies not required, Accepting new IKE connections<br>000 IKE SAs: total(1), half-open(0), open(0), authenticated(1), anonymous(0)<br>000 IPsec SAs: total(1), authenticated<br><br></span></div><div class="gmail_extra">Thanks in advanec!<br></div><span class=""><div class="gmail_extra"><br>-- <br><div><div dir="ltr"><div><div dir="ltr">--<br>Sergio Belkin<br>LPIC-2 Certified - <a href="http://www.lpi.org" target="_blank">http://www.lpi.org</a></div></div></div></div>
</div></span></div>
</blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">--<br>Sergio Belkin<br>LPIC-2 Certified - <a href="http://www.lpi.org" target="_blank">http://www.lpi.org</a></div></div></div></div>
</div>