<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Hi all,<br><br>I'm trying to establish a roadwarrior connection using openswan\lx2tpd(I wanto to assign to my roadwarrior a virtual ip-address inside the openswan gateway's lan).<br>Both server and client are natted<br>(10.1.1.0/24 client10.1.1.16-----10.1.1.1router141.250.x.x--------------internet-------------140.250.x.x-router-192.168.1.1----------192.168.1.9openswan gateway 192.168.1.0/24).<br> Following Jacco's advices it seems everything should work right.<br>At first I establish a tunnel from client to server(the comand<span style="font-style: italic;"> /etc/init.d/ipsec status</span> says <span style="font-style: italic;">1tunnel up, some eroute exist</span>), and after that I start the xl2tpd<br> daemon on client (and server) in order to assign to my roadwarrior the virtual ip address.<br><br>Here's my xl2tpd.conf of the client <br><br> <span style="font-style: italic;">[lac Eugenio_prova] ; Example VPN LAC definition</span><br style="font-style: italic;"><span style="font-style: italic;"> lns = 141.250.x.x ; * Who is our LNS?</span><br style="font-style: italic;"><span style="font-style: italic;">; lns = lns2.marko.net ; * A backup LNS (not yet used)</span><br style="font-style: italic;"><span style="font-style: italic;"> redial = yes ; * Redial if disconnected?</span><br style="font-style: italic;"><span style="font-style: italic;">; redial timeout = 15 ; * Wait n seconds between redials</span><br style="font-style: italic;"><span style="font-style: italic;">; max redials = 5 ; * Give up after n consecutive failures</span><br style="font-style: italic;"><span style="font-style: italic;">; hidden bit = yes ; * User hidden AVP's?</span><br style="font-style: italic;"><span style="font-style: italic;">; local ip = 192.168.1.1 ; * Force peer to use this IP for us</span><br style="font-style: italic;"><span style="font-style: italic;">; remote ip = 192.168.1.2 ; * Force peer to use this as their IP</span><br style="font-style: italic;"><span style="font-style: italic;">; length bit = no ; * Use length bit in payload?</span><br style="font-style: italic;"><span style="font-style: italic;"> require pap = no ; * Require PAP auth. by peer</span><br style="font-style: italic;"><span style="font-style: italic;"> require chap = no ; * Require CHAP auth. by peer</span><br style="font-style: italic;"><span style="font-style: italic;"> refuse pap = yes ; * Refuse PAP authentication</span><br style="font-style: italic;"><span style="font-style: italic;"> refuse chap = yes ; * Refuse CHAP authentication</span><br style="font-style: italic;"><span style="font-style: italic;"> refuse authentication = yes ; * Refuse authentication altogether</span><br style="font-style: italic;"><span style="font-style: italic;">; require authentication = no ; * Require peer to authenticate</span><br style="font-style: italic;"><span style="font-style: italic;"> name = roadwarrior ; * Report this as our hostname</span><br style="font-style: italic;"><span style="font-style: italic;">; ppp debug = no ; * Turn on PPP debugging</span><br style="font-style: italic;"><span style="font-style: italic;"> pppoptfile = /etc/ppp/options.l2tpd.lac ; * ppp options file for this lac</span><br style="font-style: italic;"><span style="font-style: italic;">; call rws = 10 ; * RWS for call (-1 is valid)</span><br style="font-style: italic;"><span style="font-style: italic;">; tunnel rws = 4 ; * RWS for tunnel (must be > 0)</span><br style="font-style: italic;"><span style="font-style: italic;">; flow bit = yes ; * Include sequence numbers</span><br style="font-style: italic;"><span style="font-style: italic;">; challenge = yes ; * Challenge authenticate peer </span><br style="font-style: italic;"><br><br>I don't want any type of autentication for the moment.<br>My problem is that, when i try to startup l2tpd daemon with /etc/init.d/xl2tpd start (after creating the required folder /var/run/xl2tpd) NOTING HAPPEN.<br>I don't know why.I use wireshark to sniffing over eth0, but there are no packets exchanging between client and server when I startup xl2tpd.<br>Do you have any suggestion?!<br>This is the last step of my thesis, but i can't do it, I hope somebody can help me.<br>Thank you in advantage.<br><br><br /><hr />5GB di spazio per i tuoi file online. <a href='http://skydrive.live.com/' target='_new'>È gratis, è SkyDrive!</a></body>
</html>