@Raji,

It looks like the issue is that StrongSwan cannot find the ‘tun1‘ configuration. Double-check your ipsec.conf file for any syntax errors or misconfigurations.

Ensure that the configuration file is saved correctly and try reloading the StrongSwan configuration with:

# ipsec reload

Then attempt to bring up the tunnel again:

# ipsec up tun1

If it still doesn’t work, consider checking the logs using journalctl -xe for more detailed error information, which can help troubleshoot the problem further.

Any help, please?

/etc/strongswan/ipsec.conf:

config setup
    charondebug="all"
    uniqueids=no
    strictcrlpolicy=no

conn tun1
    type=transport
    auto=add
    keyexchange=ikev2
    authby=secret
    left=70.70.70.20
    right=70.70.70.10
    ike=aes256-sha1-modp1024
    esp=aes256-sha1
    pfs=no

/etc/strongswan/ipsec.secrets:

70.70.70.20 70.70.70.10 : PSK "12345678910abcedf"

# systemctl restart strongswan
# strongswan up tun1
no config named 'tun1'

Can this method help me secure and authenticate my tunnel ??

Or it is totally different method?

@Christophe,

I think we have disabled firewall, but you can open port if you an have active firewall.

# firewall-cmd --permanent --add-service="ipsec"
# firewall-cmd --permanent --add-port=4500/udp
# firewall-cmd --permanent --add-masquerade
# firewall-cmd --reload