<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 12pt; color: #000000'>Hi,<br><br>Sorry for my bad english.<br><br>Few weeks ago, I had a problem with the last openswan (2.6.21) and xl2tpd.<br>Someone told me that this version has a bug with nat-t and advice me to use the 2.4.14 of openswan version.<br><br>Bug at http://bugs.xelerance.com/view.php?id=1004<br><br>I have just setup the 2.4.14, and I'm trying to use it with netkey, but it doesn't work.<br><br>I'm trying with a Windows Vista and I have this log :<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: responding to Quick Mode {msgid:04000000}<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: STATE_QUICK_R2: IPsec SA established {ESP=>0xfe146102 <0xb12972e0 xfrm=AES_128-HMAC_SHA1 NATD=82.229.55.165:4500 DPD=none}<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #7: received Delete SA(0x76e0a5b3) payload: deleting IPSEC State #10<br>Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #7: received and ignored informational message<br><br>I can see that the tunnel is established, but nothing is logged by xl2tpd.<br><br>How should I do to get working this ?<br><br>Thanks for your helps.<br><br># Add connections here<br>conn %default<br> keyingtries=1<br> compress=yes<br> disablearrivalcheck=no<br> authby=rsasig<br> leftrsasigkey=%cert<br> rightrsasigkey=%cert<br><br># sample VPN connections, see /etc/ipsec.d/examples/<br><br>conn roadwarrior<br> pfs=no<br> type=transport<br> auto=add<br> leftcert=vpn.olympecti.fr.pem<br> left=192.168.1.116<br> leftnexthop=192.168.1.1<br> leftprotoport=17/%any<br> right=%any<br> rightprotoport=17/%any<br><br><div><font size="2">---</font></div>azer<br></div></body></html>