<br>
Paul,<br>
<br>
Do you mean this bug is NOT fixed and blocks all RHEL5 versions from connecting L2TP clients? <br>
Can you show me the link for the bug in some bugzilla or mantis.<br>
<br>
What do you propose to do in that case? I can not change the distro. If
you know the kernel versions that fixed that bug, I can recompile the
kernel.<br>
<br>
Can you propose to go with KLIPS? Is it known to be compiling in RHEL5 kernel?<br>
<br>
Best Regards,<br>
Oguz.<br>
<br>
Note: <br>
<br>
"control" debug for pluto shows:<br>
<br>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="ProgId" content="Word.Document"><meta name="Generator" content="Microsoft Word 12"><meta name="Originator" content="Microsoft Word 12"><link rel="File-List" href="file:///C:%5CUsers%5Coguz%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_filelist.xml"><link rel="Preview" href="file:///C:%5CUsers%5Coguz%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_preview.wmf"><link rel="themeData" href="file:///C:%5CUsers%5Coguz%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_themedata.thmx"><link rel="colorSchemeMapping" href="file:///C:%5CUsers%5Coguz%5CAppData%5CLocal%5CTemp%5Cmsohtmlclip1%5C01%5Cclip_colorschememapping.xml"><style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:162;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:-1610611985 1107304683 0 0 159 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-charset:162;
mso-generic-font-family:swiss;
mso-font-pitch:variable;
mso-font-signature:-1610611985 1073750139 0 0 159 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin-top:0cm;
margin-right:0cm;
margin-bottom:10.0pt;
margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
p.MsoNoSpacing, li.MsoNoSpacing, div.MsoNoSpacing
{mso-style-priority:1;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
.MsoPapDefault
{mso-style-type:export-only;
margin-bottom:10.0pt;
line-height:115%;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | route_and_eroute:
instance \"my.l2tp\"[2] 85.99.218.171, setting eroute_owner
{spd=0x94636e8,sr=0x94636e8} to #2 (was #0) (newest_ipsec_sa=#0)</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | complete state
transition with STF_OK</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: \"my.l2tp\"[2]
85.99.218.171 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | inserting event
EVENT_SA_REPLACE, timeout in 3330 seconds for #2</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: \"my.l2tp\"[2]
85.99.218.171 #2: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xd44e5524 <0x2554feed xfrm=AES_128-HMAC_SHA1 NATOA=192.168.2.2
NATD=<a href="http://85.99.218.171:4500">85.99.218.171:4500</a> DPD=none}</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | modecfg pull:
noquirk policy:push not-client</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | phase 1 is done,
looking for phase 2 to unpend</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | * processed 0
messages from cryptographic helpers</p>
<p class="MsoNoSpacing">Dec 24 20:37:03 2008 pluto[32179]: | next event
EVENT_NAT_T_KEEPALIVE in 20 seconds</p>
<p class="MsoNoSpacing"> </p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: |</p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: | *time to handle
event</p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: | handling event
EVENT_NAT_T_KEEPALIVE</p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: | event after this is
EVENT_PENDING_PHASE2 in 91 seconds</p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: | processing
connection my.l2tp[2] 85.99.218.171</p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: | processing
connection my.l2tp[2] 85.99.218.171</p>
<p class="MsoNoSpacing">Dec 24 20:37:23 2008 pluto[32179]: | next event
EVENT_PENDING_PHASE2 in 91 seconds</p>
<br><br><div class="gmail_quote">On Wed, Dec 24, 2008 at 10:26 PM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Wed, 24 Dec 2008, Oguz Yilmaz wrote:<br>
<br>
> I am using openswan-2.6.14-1.el5_2.1 and xl2tpd-1.1.12-1 on Centos EL5<br>
> (RHEL5). The result with l2tpd-0.69-0.4.20051030.el5 is also the same.<br>
> I can not establish L2TP vpn connection from Windows XP or Vista. On the<br>
> Windows side, it only says "Connecting".<br>
><br>
> All the logs and config portions is attached below.<br>
<br>
</div>The bug seems to be in wrong NETKEY policies installed in the kerel. It's<br>
a known bug, that needs some work to be fixed.<br>
<font color="#888888"><br>
Paul<br>
</font></blockquote></div><br>