<div>Hi</div>
<div> </div>
<div>iam process of reading docs and trying to setup my vpn connection inside office for testing</div>
<div>then later move to production</div>
<div> </div>
<div>here is the proceedure i have followed</div>
<div> </div>
<div>1. installed FC4</div>
<div>2. installed openwan 2.4</div>
<div>3. ppp installed</div>
<div>4. install l2tpd 0.69-13</div>
<div> </div>
<div>ipsec.conf</div>
<div> </div>
<div>
<p>version 2.0<br>config setup<br> interfaces=%defaultroute<br> klipsdebug=none<br> plutodebug=none<br> nat_traversal=yes</p>
<p>#virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:172.16.0.0/12"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 10.0.0.0/8,%v4:172.16.0.0/12</a></p>
<p>conn %default<br> keyingtries=3<br> compress=yes<br> disablearrivalcheck=no<br> authby=secret<br> type=tunnel<br> keyexchange=ike<br> ikelifetime=240m<br> keylife=60m</p>
<p><br>conn l2tp-psk<br> pfs=no<br> left=myiprange<br> #leftnexthop=<a href="http://192.168.242.1"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> 192.168.242.1</a><br> leftprotoport=17/1701<br> right=%any<br> rightprotoport=17/1701
<br> right=%any<br> rightsubnet=vhost:%priv,%no<br> auto=add</p>
<p><br>#Disable Opportunistic Encryption<br>include /etc/ipsec.d/examples/no_oe.conf<br>---------</p>
<p>l2tpd.conf<br>-----------------</p></div>
<div>
<p>[global]<br>listen-addr = Public ip of the VPN Server</p>
<p>[lns default]<br>ip range = Publicpool.18-publicpool.23<br>local ip = public ip other than VPN Server IP<br>require chap = yes<br>refuse pap = yes<br>require authentication = yes<br>name = LinuxVPNserver<br>ppp debug = yes
<br>pppoptfile = /etc/ppp/options.l2tpd<br>length bit = yes<br>--------------------------------</p>
<p>more options.l2tpd<br>require-mschap-v2<br>ipcp-accept-local<br>ipcp-accept-remote<br>ms-dns mypublic DNS IP</p>
<p>ms-dns mypublic DNS IP2<br>noccp<br>auth<br>crtscts<br>idle 1800<br>mtu 1410<br>mru 1410<br>nodefaultroute<br>debug<br>lock<br>proxyarp<br>connect-delay 5000<br></p>
<p>more chap-secrets<br># Secrets for authentication using CHAP<br># client server secret IP addresses<br>user * password *</p>
<p>I config XP vpn client using below link</p>
<p><a href="http://www.jacco2.dds.nl/networking/win2000xp-freeswan.html">http://www.jacco2.dds.nl/networking/win2000xp-freeswan.html</a></p>
<p>opened the VPN connection enter user name and password</p>
<p> </p>
<p>when i dial to the server</p>
<p>i get following message</p></div>
<div> </div>
<div>Sep 19 16:45:12 vpn pluto[2495]: packet from mylaptopip:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<br>Sep 19 16:45:12 vpn pluto[2495]: packet from mylaptopip:500: ignoring Vendor ID payload [FRAGMENTATION]
<br>Sep 19 16:45:12 vpn pluto[2495]: packet from mylaptopip:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<br>Sep 19 16:45:12 vpn pluto[2495]: packet from mylaptopip:500: initial Main Mode message received on myvpnip:500 but no connection has been authorized
<br>Sep 19 16:45:13 vpn pluto[2495]: packet from mylaptopip:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<br>Sep 19 16:45:13 vpn pluto[2495]: packet from mylaptopip:500: ignoring Vendor ID payload [FRAGMENTATION]
<br>Sep 19 16:45:13 vpn pluto[2495]: packet from mylaptopip:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<br>Sep 19 16:45:13 vpn pluto[2495]: packet from mylaptopip:500: initial Main Mode message received on myvpnip:500 but no connection has been authorized
<br> </div>
<div> </div>
<div>any help will be great</div>
<div> </div>
<div>Ram<br><br> </div>
<div><span class="gmail_quote">On 9/18/06, <b class="gmail_sendername">Paul Wouters</b> <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">On Mon, 18 Sep 2006, ram wrote:<br><br>> Hi paul<br>><br>> thanks for the help<br>><br>> i have setup the server
<br>> and when i try to dial in to server IP<br>><br>> on XP i get error<br>><br>> Erro 789:<br>><br>> Sep 18 19:37:03 vpn pluto[8538]: Can not opportunistically initiate<br>> for myserverip to myxpip: KEY record for hostname as %myid (no good TXT): no
<br>> host vpn. for KEY record<br><br>As stated before, you must include /etc/ipsec.d/examples/no_oe.conf to<br>disable running OE.<br><br>Paul<br></blockquote></div><br>