Distribution EOLE » Modules » Amon

Bonjour

Je suis en cours d'installation d'un premier SPHYNX 2.3 et d'un premier AMON 2.3 (en test) ; les 2 serveurs sont à jour.
Je suis en mode PKI et dispose un serveur ZEPHIR 2.3
Ma conf RVP est créé sur ARV (Certificat ajouté , ip publique renseignée , Configuration Ok) et envoyée sur Zephir.

Après active_rvp init , lors du lancement du service RVP sur l'AMON 2.3 , j'ai le message suivant sur SPHYNX :

 tail -f   /var/log/rsyslog/local/charon/charon.info.log

Jun 18 17:16:28 sphynx23 charon: 02[NET] received packet: from 82.127.37.152[500] to 194.167.91.212[500]
Jun 18 17:16:28 sphynx23 charon: 02[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
Jun 18 17:16:28 sphynx23 charon: 02[IKE] no IKE config found for 194.167.91.212...82.127.37.152, sending NO_PROPOSAL_CHOSEN
Jun 18 17:16:28 sphynx23 charon: 02[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Jun 18 17:16:28 sphynx23 charon: 02[NET] sending packet: from 194.167.91.212[500] to 82.127.37.152[500]

Coté Amon 23 j'ai :

Starting IKE charon daemon (strongSwan 5.0.1, Linux 2.6.32-47-eole, x86_64)
Jun 18 17:47:14 amon23 charon: 00[CFG] loaded 0 RADIUS server configurations
Jun 18 17:47:14 amon23 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
Jun 18 17:47:14 amon23 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
Jun 18 17:47:14 amon23 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
Jun 18 17:47:14 amon23 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
Jun 18 17:47:14 amon23 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
Jun 18 17:47:14 amon23 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
Jun 18 17:47:14 amon23 charon: 00[CFG] expanding file expression '/var/lib/strongswan/ipsec.secrets.inc' failed
Jun 18 17:47:14 amon23 charon: 00[DMN] loaded plugins: charon test-vectors curl ldap sqlite pkcs11 aes des sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem openssl fips-prf gmp agent xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke sql updown eap-identity eap-aka eap-md5 eap-gtc eap-mschapv2 eap-radius eap-tls eap-ttls eap-tnc xauth-generic xauth-eap tnc-tnccs led duplicheck addrblock
Jun 18 17:47:14 amon23 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
Jun 18 17:47:14 amon23 charon: 00[JOB] spawning 16 worker threads
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'dmz-reseau192_1'
Jun 18 17:47:14 amon23 charon: 09[IKE] initiating IKE_SA AMON23_TEST-SPHYNX23 Agriates_1[1] to 194.167.91.212
Jun 18 17:47:14 amon23 charon: 09[IKE] initiating IKE_SA AMON23_TEST-SPHYNX23 Agriates_1[1] to 194.167.91.212
Jun 18 17:47:14 amon23 charon: 09[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
Jun 18 17:47:14 amon23 charon: 09[NET] sending packet: from 10.106.101.2[500] to 194.167.91.212[500]
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'dmz-reseau10_2'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'dmz-reseau_ader_3'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'dmz-reseau172_4'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'admin-reseau_eth1_5'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'admin-reseau192_6'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'admin-reseau10_7'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'admin-reseau_ader_8'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'admin-reseau172_9'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'pedago-reseau192_10'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'pedago-reseau10_11'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'pedago-reseau_ader_12'
Jun 18 17:47:14 amon23 charon: 09[JOB] start action: initiate 'pedago-reseau172_13'
Jun 18 17:47:14 amon23 charon: 10[NET] received packet: from 194.167.91.212[500] to 10.106.101.2[500]
Jun 18 17:47:14 amon23 charon: 10[ENC] parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]
Jun 18 17:47:14 amon23 charon: 10[IKE] received NO_PROPOSAL_CHOSEN notify error

Mon tunnel est FAILED.

Avez vous une idée de ce qui me manque pour que cela fonctionne ?
Merci d'avance pour votre aide.

Note : les règles ERA proviennent d'un amon 2.2 opérationnel

Cordialement