<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Arial">Hi Jacoo,<br>
<br>
Thanks for your help.<br>
</font></font><br>
Jacco de Leeuw wrote:
<blockquote cite="mid466FDD8D.2000808@dds.nl" type="cite">Utkarsh Shah
wrote:
<br>
<br>
<blockquote type="cite">1. When L2TP server is behind NAT box, it
doesn't work.
<br>
</blockquote>
<br>
<a class="moz-txt-link-freetext" href="http://www.jacco2.dds.nl/networking/openswan-l2tp.html#serverNATed">http://www.jacco2.dds.nl/networking/openswan-l2tp.html#serverNATed</a>
<br>
<br>
Or do you mean you are forwarding L2TP from the Openswan server to
<br>
some other L2TP server located behind it?
<br>
</blockquote>
I have same network scenario which you have described.<br>
After editing registry, I am able to successfully establish IPSec SA
but not able to establish l2tp connection.<br>
i checked tcp dump and found that udp1701 packets were comming on
ipsec0 interface but they are not received by l2tp daemon<br>
still i m checking on it.. may be its my mistake in configuration.<br>
<blockquote cite="mid466FDD8D.2000808@dds.nl" type="cite"><br>
<blockquote type="cite">2. MS-CHAP or CHAP protocol support, in case
of external authentication.
<br>
i.e. we have radius server to authenticate user. if user selects
chap or ms-chap at l2tp client, password will be passed encrypted.
<br>
and we are not be able pass decrypted password and at external
server we need plain password.
<br>
</blockquote>
<br>
What is your question exactly?
<br>
<br>
The lack of encryption in PAP should not be much of a problem. It is
<br>
encrypted within IPsec anyway.
<br>
</blockquote>
I want external authentication for l2tp users<br>
i am able to do it if PAP is used<br>
i want to use chap or ms-chap<br>
external server accepts plain password<br>
please guide me to achieve it.<br>
<blockquote cite="mid466FDD8D.2000808@dds.nl" type="cite"><br>
<blockquote type="cite">Please guide me to achieve above requirement.
Will xl2tp will help ??
<br>
</blockquote>
<br>
xl2tpd is an updated version but I think it will work the same as l2tpd
<br>
in this respect.
<br>
<br>
Jacco
<br>
</blockquote>
</body>
</html>