<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#333333">
My openswan is already patched with NAT :<b><br>
Nov 21 23:12:12 sd-5193 pluto[25688]: including NAT-Traversal
patch (Version 0.6c)</b><br>
<br>
Is someone could post me an exemple of a working l2tpd configuration
please ?<br>
I think that my "ipsec.conf" is correctly configured. Thanks for your
help.<br>
<br>
<blockquote cite="mid45641A76.6010902@laposte.net" type="cite"><br>
Peter McGill a écrit :
<blockquote cite="mid00a201c70db9$b00e0c50$9500000a@ghport3"
type="cite">(Off
list) <br>
<br>
<blockquote type="cite">OK, i've tried your configuration without
type=transport and the line "Transport mode disabled ..." disappears : <br>
But the connection still doesn't works. <br>
</blockquote>
<br>
Sorry about that, Paul corrected me, but I guess you haven't seen that
yet. <br>
You still need, type=transport, but you also need. <br>
<blockquote type="cite">That openswan was compiled without
USE_NAT_TRAVERSAL_TRANSPORT_MODE?=true <br>
Edit in Makefile.inc and recompile. <br>
</blockquote>
See below for more detail. <br>
<br>
Peter <br>
<br>
<blockquote type="cite">On Tue, 21 Nov 2006, Peter McGill wrote: <br>
<br>
<blockquote type="cite">> I'd like to configure ipsec with an
l2tpd authentication. I already have a fonctionnal connection <br>
> at my work (using the win xp pro sp2 vpn l2tp client). <br>
<br>
I have almost the same setup, although I don't have NAT-T enabled on
mine. <br>
I just got mine working yesterday, so I'm no expert, but it works. <br>
<br>
> type=transport <br>
I don't have this line in my conn, are you sure you need it. <br>
</blockquote>
<br>
Yes you do on 2.4.7. It happened to work on older openswan's without it
<br>
(and in fact on older ones you couldn't use it in combination with the <br>
nat-t rightsubnet= line. <br>
<br>
<blockquote type="cite">The default is type=tunnel, which is what
I'm using without the line. <br>
</blockquote>
<br>
No, you're using transport mode, you just don't know it :) <br>
<br>
<blockquote type="cite">> Nov 21 17:42:48 sd-5193
pluto[25394]:
"roadwarriorxp"[4] 82.236.77.42:11559 #4: NAT-Traversal: Transport mode
disabled due to <br>
> security concerns <br>
</blockquote>
<br>
That openswan was compiled without
USE_NAT_TRAVERSAL_TRANSPORT_MODE?=true <br>
Edit in Makefile.inc and recompile. <br>
<br>
Paul <br>
</blockquote>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>