<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 6.00.2900.2912" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>Hi,</FONT></DIV>
<DIV><FONT size=2> I am a beginner of Openswan.I tried to
connect my openswan server on a machine running linux from another machine
running windows XP, and the error message 31 was generated by windows. Could
anyont tell me the reason? Thank you!</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=2> This is my Ipsec.conf:</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>conn L2TP-TEST</FONT><FONT
size=2><BR>
authby=secret<BR>
pfs=no<BR>
rekey=no<BR>
keyingtries=3<BR></FONT></DIV>
<DIV><FONT size=2>
left=192.168.10.2<BR>
right=%any<BR>
rightprotoport=17/%any<BR>
auto=add</FONT></DIV><FONT size=2>
<DIV><BR> </DIV>
<DIV> And this is my l2tpd.conf:</DIV>
<DIV>[global] ; Global parameters:<BR>auth file = /etc/ppp/chap-secrets ;</DIV>
<DIV> </DIV>
<DIV>[lns default]<BR>ip range = 192.168.10.128-192.168.10.254<BR>local ip =
192.168.10.3<BR>require chap = yes<BR>refuse pap = yes<BR>require authentication
= yes<BR>name = LinuxVPNserver<BR>ppp debug = yes<BR>pppoptfile =
/etc/ppp/options.l2tpd<BR>length bit = yes</DIV>
<DIV> </DIV>
<DIV> The infomation in /var/log/secure :</DIV>
<DIV> </DIV>
<DIV>Jul 7 18:42:15 gcnode028 pluto[27957]: packet from 10.10.21.159:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<BR>Jul 7
18:42:15 gcnode028 pluto[27957]: packet from 10.10.21.159:500: ignoring Vendor
ID payload [FRAGMENTATION]<BR>Jul 7 18:42:15 gcnode028 pluto[27957]:
packet from 10.10.21.159:500: received Vendor ID payload
[draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port floating is
off<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: packet from
10.10.21.159:500: ignoring Vendor ID payload [Vid-Initial-Contact]<BR>Jul
7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: responding
to Main Mode from unknown peer 10.10.21.159<BR>Jul 7 18:42:15 gcnode028
pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: transition from state
STATE_MAIN_R0 to state STATE_MAIN_R1<BR>Jul 7 18:42:15 gcnode028
pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: STATE_MAIN_R1: sent MR1,
expecting MI2<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14]
10.10.21.159 #62: transition from state STATE_MAIN_R1 to state
STATE_MAIN_R2<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14]
10.10.21.159 #62: STATE_MAIN_R2: sent MR2, expecting MI3<BR>Jul 7 18:42:15
gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: Main mode peer ID is
ID_IPV4_ADDR: '10.10.21.159'<BR>Jul 7 18:42:15 gcnode028 pluto[27957]:
"L2TP-TEST"[14] 10.10.21.159 #62: I did not send a certificate because I do not
have one.<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14]
10.10.21.159 #62: transition from state STATE_MAIN_R2 to state
STATE_MAIN_R3<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14]
10.10.21.159 #62: STATE_MAIN_R3: sent MR3, ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha
group=modp2048}<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14]
10.10.21.159 #63: responding to Quick Mode {msgid:9beeb0e3}<BR>Jul 7
18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: transition
from state STATE_QUICK_R0 to state STATE_QUICK_R1<BR>Jul 7 18:42:15
gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: STATE_QUICK_R1: sent
QR1, inbound IPsec SA installed, expecting QI2<BR>Jul 7 18:42:15 gcnode028
pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: up-host output: Cannot open
"/proc/sys/net/ipv4/route/flush"<BR>Jul 7 18:42:15 gcnode028 pluto[27957]:
"L2TP-TEST"[14] 10.10.21.159 #63: route-host output: Cannot open
"/proc/sys/net/ipv4/route/flush"<BR>Jul 7 18:42:15 gcnode028 pluto[27957]:
"L2TP-TEST"[14] 10.10.21.159 #63: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2<BR>Jul 7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14]
10.10.21.159 #63: STATE_QUICK_R2: IPsec SA established {ESP=>0x5c0d0845
<0x1f888d36 xfrm=3DES_0-HMAC_MD5 NATD=none DPD=none}<BR>Jul 7 18:42:18
gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: received Delete
SA(0x5c0d0845) payload: deleting IPSEC State #63<BR>Jul 7 18:42:19
gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: unroute-host output:
Cannot open "/proc/sys/net/ipv4/route/flush"<BR>Jul 7 18:42:19 gcnode028
pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: received and ignored
informational message<BR>Jul 7 18:42:19 gcnode028 pluto[27957]:
"L2TP-TEST"[14] 10.10.21.159 #62: received Delete SA payload: deleting ISAKMP
State #62<BR>Jul 7 18:42:19 gcnode028 pluto[27957]: packet from
10.10.21.159:500: received and ignored informational
message</DIV></FONT></BODY></HTML>