<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">I solved my Centos 6 issues. <div><br></div><div>I did a standard build of the 2.2.1 Client for Linux. <br><div><br></div><div>My biggest problem was trying to use a path name in the ikec command. The -r option wants the name of a config file in $HOME/.ike/sites not a path name.</div><div><br></div><div>I did have to change the packet filtering. </div><div><br></div><div>Temp solution:</div><div><pre style="background-color: white; font-size: 18px; border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(238, 238, 238) rgb(238, 238, 238) rgb(238, 238, 238) rgb(204, 204, 204); margin: 10px 20px; padding: 10px; vertical-align: baseline; font-family: 'Liberation Sans', 'Luxi Sans', 'Trebuchet MS', 'Bitstream Vera Sans', helvetica, verdana, arial, sans-serif; overflow-x: auto; width: auto; word-wrap: normal; color: rgb(51, 51, 51); line-height: 24.920000076293945px; background-repeat: repeat repeat;"><code style="background-color: transparent; font-size: 15px; border: 0px; margin: 0px; padding: 0px; vertical-align: baseline; overflow-x: auto; width: auto; word-wrap: normal;">echo 2 > /proc/sys/net/ipv4/conf/default/rp_filter</code></pre><div><pre style="background-color: white; font-size: 18px; border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(238, 238, 238) rgb(238, 238, 238) rgb(238, 238, 238) rgb(204, 204, 204); margin: 10px 20px; padding: 10px; vertical-align: baseline; font-family: 'Liberation Sans', 'Luxi Sans', 'Trebuchet MS', 'Bitstream Vera Sans', helvetica, verdana, arial, sans-serif; overflow-x: auto; width: auto; word-wrap: normal; color: rgb(51, 51, 51); line-height: 24.920000076293945px; background-repeat: repeat repeat;"><code style="background-color: transparent; font-size: 15px; border: 0px; margin: 0px; padding: 0px; vertical-align: baseline; overflow-x: auto; width: auto; word-wrap: normal;">echo 2 > /proc/sys/net/ipv4/conf/all/rp_filter</code></pre><div><br></div></div></div><div>Perm Solution:</div><div><br></div><div>Add the following to /etc/sysctl.conf as described in <a href="https://access.redhat.com/site/solutions/53031">https://access.redhat.com/site/solutions/53031</a></div><div><pre style="background-color: white; font-size: 18px; border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(238, 238, 238) rgb(238, 238, 238) rgb(238, 238, 238) rgb(204, 204, 204); margin: 10px 20px; padding: 10px; vertical-align: baseline; font-family: 'Liberation Sans', 'Luxi Sans', 'Trebuchet MS', 'Bitstream Vera Sans', helvetica, verdana, arial, sans-serif; overflow-x: auto; width: auto; word-wrap: normal; color: rgb(51, 51, 51); line-height: 24.920000076293945px; background-repeat: repeat repeat;"><code style="background-color: transparent; font-size: 15px; border: 0px; margin: 0px; padding: 0px; vertical-align: baseline; overflow-x: auto; width: auto; word-wrap: normal;">net.ipv4.conf.default.rp_filter = 2</code></pre><div><br></div></div><div>Sanitized VPN Config:</div><div><br></div><div><div>n:version:2</div><div>s:network-host: FIREWALL_IP_ADDRESS</div><div>n:network-ike-port:500</div><div>s:client-auto-mode:push</div><div>n:network-mtu-size:1380</div><div>s:client-iface:virtual</div><div>n:client-addr-auto:1</div><div>s:network-natt-mode:enable</div><div>n:network-natt-port:4500</div><div>n:network-natt-rate:15</div><div>s:network-frag-mode:enable</div><div>n:network-frag-size:540</div><div>n:network-dpd-enable:0</div><div>n:client-banner-enable:0</div><div>n:network-notify-enable:0</div><div>n:client-wins-used:1</div><div>n:client-wins-auto:1</div><div>n:client-dns-used:1</div><div>n:client-dns-auto:1</div><div>n:client-splitdns-used:1</div><div>n:client-splitdns-auto:1</div><div>s:auth-method:mutual-psk-xauth</div><div>s:ident-client-type:ufqdn</div><div>s:ident-server-type:any</div><div>s:ident-client-data:vpn@<a href="http://mydomain.com">mydomain.com</a></div><div>b:auth-mutual-psk:PSK_VALUE</div><div>s:phase1-exchange:aggressive</div><div>n:phase1-dhgroup:2</div><div>s:phase1-cipher:3des</div><div>s:phase1-hash:sha1</div><div>n:phase1-life-secs:28800</div><div>n:phase1-life-kbytes:0</div><div>n:vendor-chkpt-enable:0</div><div>s:phase2-transform:esp-3des</div><div>s:phase2-hmac:sha1</div><div>s:ipcomp-transform:disabled</div><div>n:phase2-pfsgroup:2</div><div>n:phase2-life-secs:3600</div><div>n:phase2-life-kbytes:0</div><div>s:policy-level:auto</div><div>n:policy-nailed:0</div><div>n:policy-list-auto:0</div><div>s:policy-list-include:BEHIND_THE_FIREWALL_NETWORK/ 255.255.255.0</div></div><div><br></div><div><br></div><div><br></div></div></body></html>