Подскажите плиз в чем может быть проблема ipsec + mac
tcpdump
18:17:35.188985 IP cl.ie.nt.ip.500 > se.rv.er.ip.500: isakmp: parent_sa ikev2_init[I]
18:17:35.215674 IP se.rv.er.ip.500 > cl.ie.nt.ip.500: isakmp: parent_sa ikev2_init[R]
Log
Jun 2 18:17:35 vpn charon: 04[NET] received packet: from cl.ie.nt.ip[500] to se.rv.er.ip[500] (604 bytes)
Jun 2 18:17:35 vpn charon: 04[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(REDIR_SUP) N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
Jun 2 18:17:35 vpn charon: 04[IKE] cl.ie.nt.ip is initiating an IKE_SA
Jun 2 18:17:35 vpn charon: 04[IKE] remote host is behind NAT
Jun 2 18:17:35 vpn charon: 04[IKE] sending cert request for "CN=vpn.domain.com"
Jun 2 18:17:35 vpn charon: 04[IKE] sending cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"
Jun 2 18:17:35 vpn charon: 04[IKE] sending cert request for "C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=vpn"
Jun 2 18:17:35 vpn charon: 04[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(FRAG_SUP) N(MULT_AUTH) ]
Jun 2 18:17:35 vpn charon: 04[NET] sending packet: from se.rv.er.ip[500] to cl.ie.nt.ip[500] (513 bytes)
Jun 2 18:17:38 vpn charon: 06[NET] received packet: from cl.ie.nt.ip[500] to se.rv.er.ip[500] (604 bytes)
Jun 2 18:17:38 vpn charon: 06[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(REDIR_SUP) N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
Jun 2 18:17:38 vpn charon: 06[IKE] received retransmit of request with ID 0, retransmitting response
Jun 2 18:17:38 vpn charon: 06[NET] sending packet: from se.rv.er.ip[500] to cl.ie.nt.ip[500] (513 bytes)
Jun 2 18:17:41 vpn charon: 07[NET] received packet: from cl.ie.nt.ip[500] to se.rv.er.ip[500] (604 bytes)
Jun 2 18:17:41 vpn charon: 07[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(REDIR_SUP) N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
Jun 2 18:17:41 vpn charon: 07[IKE] received retransmit of request with ID 0, retransmitting response
Jun 2 18:17:41 vpn charon: 07[NET] sending packet: from se.rv.er.ip[500] to cl.ie.nt.ip[500] (513 bytes)
Jun 2 18:17:44 vpn charon: 13[NET] received packet: from cl.ie.nt.ip[500] to se.rv.er.ip[500] (604 bytes)
Jun 2 18:17:44 vpn charon: 13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(REDIR_SUP) N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
Jun 2 18:17:44 vpn charon: 13[IKE] received retransmit of request with ID 0, retransmitting response
Jun 2 18:17:44 vpn charon: 13[NET] sending packet: from se.rv.er.ip[500] to cl.ie.nt.ip[500] (513 bytes)
Jun 2 18:18:05 vpn charon: 05[JOB] deleting half open IKE_SA after timeout
