<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 12pt; color: #000000'>Hello,<br><br>Please forgive me for my bad English, I'm a french people.<br><br>I'm trying to setup an IPSEC + L2TP to permit XP an VISTA laptops to connect<br>to the business network.<br><br>I have successfully compile my new kernel with nat-t support, and I'm using the klips stack to communicate.<br><br>I have generate the CA and the ipsec gateway certificate and a .p12 windows certificate.<br>I'm testing using a XP SP3 laptop.<br><br>When I connect in local, everything is OK : my laptop can connect, and authentif=cate using the certificate and the l2tp.<br><br>If I try from outside, I can see in logs that the ipsec process is estblished, but l2tp doesn't receive anything from the remote client :<br>....<br>Apr 7 19:47:55 integration pluto[24399]: "roadwarrior"[4] 82.229.55.165 #4: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<br>Apr 7 19:47:55 integration pluto[24399]: "roadwarrior"[4] 82.229.55.165 #4: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<br>Apr 7 19:47:55 integration pluto[24399]: "roadwarrior"[4] 82.229.55.165 #4: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x0ee49cfc <0xf20f1439 xfrm=3DES_0-HMAC_MD5 NATOA=192.168.7.3 NATD=82.229.55.165:4500 DPD=none}<br>Apr 7 19:47:55 integration pluto[24399]: packet from 82.229.55.165:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<br>Apr 7 19:47:55 integration pluto[24399]: packet from 82.229.55.165:500: ignoring Vendor ID payload [FRAGMENTATION]<br>Apr 7 19:47:55 integration pluto[24399]: packet from 82.229.55.165:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106 <br>Apr 7 19:47:55 integration pluto[24399]: packet from 82.229.55.165:500: ignoring Vendor ID payload [Vid-Initial-Contact]<br>...<br><br>And the xl2tpd doesn't log anything in syslog.<br><br>My Network arch :<br><br>openswan 192.168.1.116/24 ------ gateway 192.168.1.1/24 ------- 217.x.x.x ---------------------------------------------------- 82.x.x.x --------- gateway 192.168.7.7/24 ------ 192.168.7.3/24 client laptop<br><br>My config :<br><br>config setup<br> nat_traversal=yes<br> virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12<br> OE=off<br> interfaces="ipsec0=eth0"<br> protostack=klips<br><br>conn %default<br> keyingtries=1<br> compress=yes<br> disablearrivalcheck=no<br> authby=rsasig<br> leftrsasigkey=%cert<br> rightrsasigkey=%cert<br><br>conn roadwarrior<br> type=transport<br> left=192.168.1.116<br> leftcert=integration.pem<br> leftprotoport=17/1701<br> right=%any<br> rightprotoport=17/%any<br> rightsubnet=vhost:%no,%priv<br> pfs=no<br> auto=add<br><br>Thanks in advance for your help.<br></div></body></html>