2007/8/28, Christophe Ngo Van Duc <<a href="mailto:cngovanduc@gmail.com">cngovanduc@gmail.com</a>>:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Dear all,<br><br> I am encountering a problem with a roadwarrior setup with netkey<br>(ipsec/l2tpd/ppp/radius)<br><br> I can establish the IPSec SA, then I use the mangling rule to forward to<br>l2tp:<br><br> $IPT -t mangle -A PREROUTING -p esp -j MARK --set-mark 1
<br> $IPT -t nat -A PREROUTING -m mark --mark 1 -p udp --dport 1701 -j DNAT<br>--to internal-ip<br><br> I am getting the following error on l2tpd side:<br><br>xl2tpd[11438]: control_finish: Peer requested tunnel 15 twice, ignoring
<br>second one.<br>xl2tpd[11438]: control_finish: Peer requested tunnel 15 twice, ignoring<br>second one.<br>xl2tpd[11438]: Maximum retries exceeded for tunnel 14572. Closing.<br><br> A tcpdump also show me that no ESP traffic is sent back to the
<br>roadwarrior.<br><br></blockquote></div><br>hello,<br><br>it looks like incoming traffic is arriving, but can't be send back.<br>first idea - do you have leftnexthop/rightnexthop set in your ipsec.conf to your default gateway to Internet?
<br>If not, try to set it up.<br><br>Regards,<br>Tomasz Grzelak<br><br>