first i am very sorry for my poor english.<br>i wan't to use openswan to build a vpn between computer A(WIN98,L2PT,192.168.0.67)and computer B(linux red hat 8,kernel 2.4,openswan,192.168.0.68).<br><br>the ipsec.conf is like this<br>conn test<br> left=192.168.0.67<br> right=192.168.0.68<br> encrypt=yes<br> authby=secret<br> pfs=no<br> leftprotoport=17/1701<br> rightprotoport=17/1701<br> auto=add<br><br>the ipsec.secret is like this<br>192.168.0.67 192.168.0.68: PSK "123456789"<br><br>the chap-secrets is like this<br>tpl * "123456789" 192.168.0.67<br><br>the l2tpd.conf is like this<br>[global]<br> listen-addr = 192.168.0.68<br>[lns default]<br>ip range = 192.168.0.67<br>local ip = 192.168.0.68<br>require chap = yes<br>refuse pap = no<br>require authentication = yes<br>name = LinuxVPNserver<br>ppp debug = yes<br>pppoptfile = /etc/ppp/options.l2tpd<br>length bit = yes<br><br>the options.l2tpd is like this<br>ipcp-accept-local<br>ipcp-accept-remote<br>ms-dns 192.168.1.1<br>ms-dns 192.168.1.3<br>ms-wins 192.168.1.2<br>ms-wins 192.168.1.4<br>noccp<br>auth<br>crtscts<br>idle 1800<br>mtu 1410<br>mru 1410<br>nodefaultroute<br>debug<br>lock<br>proxyarp<br>connect-delay 5000<br><br>when i used computerA(win98)to connect to computer B,the /var/log/secure showed IPsec SA established {ESP=>0xd0612df2 <0x7c8f934d xfrm=3DES_0-HMAC_SHA1}<br>but the computer A showed connect failed,and i can't ping each other this time,before the connect they can ping each other successful.<br>the log in computer A also showed IPsec SA established.<br>I do not konwn why,but i found the tcpdump in computer B showed "192.168.0.68 > 192.168.0.67 192.168.0.68 l2tp port unreachable"<br>so i used "iptables -F" in computer B,but the problem is the same.<br><br>can you help me,thanks very much!<br><!-- footer --><br><br><br>
<font style="font-size:14.8px">
<!--广告footer 开始-->
<!--广告footer 结束-->
<!--内部footer开始-->
<br>
<br><p style="line-height:250%;">
<a href="http://www.188.com/index.htm?from=footer_yahoo.com" target="_blank"><font color=blue>什么邮箱可以设置 <font color=red>图片签名档</font>，发送<font color=red>电子名片</font>？</font></a>
<img src="http://mail.126.com/favicon.ico" width=16 height=16 border=0 align=absmiddle>
</p>
<!--内部footer结束-->
</font>