<font style='{font-family: Arial,Verdana, Sans-Serif;font-size: 10pt;}'>
Hello All,<br>
<br>
I have updated the ipsec.conf and other files, also the firewall rules are adapted.<br>
But still no working openswan with PSK, I have put the all the configuration in below email, hopefully someone can help to solve the issue and getting to work<br>
<br>
In below config i have replace the of vpn server ip address by y.y.y.y and vpn client ip address: x.x.x.x<br>
<br>
Many thanks, Pual<br>
----------------------------<br>
ipsec.conf:<br>
<br>
version 2.0 <br>
config setup<br>
nat_traversal=yes<br>
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,<br>
uniqueids=yes<br>
oe=off<br>
protostack=netkey<br>
<br>
conn west-pual<br>
left=y.y.y.y<br>
leftid=vpn-server<br>
leftprotoport=17/1701<br>
right=%any<br>
rightprotoport=17/%any<br>
rightsubnet=vhost:%no,%priv<br>
authby=secret<br>
rekey=no<br>
auto=add<br>
pfs=no<br>
type=transport<br>
-----------<br>
<br>
ipsec.secrect<br>
y.y.y.y %any: PSK "test"<br>
------------<br>
<br>
/etc/ppp/options.l2tpd<br>
<br>
auth # require authentication<br>
idle 1800 # disconnect if the link is idle for xx seconds<br>
mtu 1460 # MTU tx, tunnel overhead=40 bytes => 1500 - 40 = 1460<br>
mru 1460 # MTU rx, tunnel overhead=40 bytes => 1500 - 40 = 1460<br>
debug # log control packets to syslog<br>
proxyarp # reply to ARP requests in the name of the peer<br>
name *<br>
proxyarp<br>
ipcp-accept-local<br>
ipcp-accept-remote<br>
lcp-echo-failure 3<br>
lcp-echo-interval 5<br>
nodeflate<br>
-----------------------------<br>
<br>
/etc/xl2tpd/l2tp-secrets<br>
<br>
# Secrets for authenticating l2tp tunnels<br>
* * test<br>
<br>
-------------------------<br>
<br>
Added in to the firewall rules:<br>
<br>
permit udp host y.y.y.y eq 500 any gt 1023<br>
permit udp host y.y.y.y eq 1701 any gt 1023<br>
permit tcp host y.y.y.y eq 500 any gt 1023<br>
permit tcp host y.y.y.y eq 1701 any gt 1023<br>
<br>
<br>
================<br>
Log when i try to connect: <br>
<br>
Jun 8 14:58:01 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [Dead Peer Detection]<br>
Jun 8 14:58:01 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #5: responding to Main Mode from unknown peer x.x.x.x<br>
Jun 8 14:58:01 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #5: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>
Jun 8 14:58:01 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #5: STATE_MAIN_R1: sent MR1, expecting MI2<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [RFC 3947] method set to=109<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110<br>
Jun 8 14:58:04 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [Dead Peer Detection]<br>
Jun 8 14:58:04 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #6: responding to Main Mode from unknown peer x.x.x.x<br>
Jun 8 14:58:04 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #6: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>
Jun 8 14:58:04 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #6: STATE_MAIN_R1: sent MR1, expecting MI2<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [RFC 3947] method set to=109<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110<br>
Jun 8 14:58:07 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [Dead Peer Detection]<br>
Jun 8 14:58:07 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #7: responding to Main Mode from unknown peer x.x.x.x<br>
Jun 8 14:58:07 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #7: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>
Jun 8 14:58:07 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #7: STATE_MAIN_R1: sent MR1, expecting MI2<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [RFC 3947] method set to=109<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110<br>
Jun 8 14:58:10 vpn-server pluto[9177]: packet from x.x.x.x:500: received Vendor ID payload [Dead Peer Detection]<br>
Jun 8 14:58:10 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #8: responding to Main Mode from unknown peer x.x.x.x<br>
Jun 8 14:58:10 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #8: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>
Jun 8 14:58:10 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #8: STATE_MAIN_R1: sent MR1, expecting MI2<br>
Jun 8 14:58:24 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #1: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:58:27 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #2: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:58:30 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #3: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:58:33 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #4: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:59:11 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #5: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:59:14 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #6: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:59:17 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #7: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:59:20 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x #8: max number of retransmissions (2) reached STATE_MAIN_R1<br>
Jun 8 14:59:20 vpn-server pluto[9177]: "west-pual"[1] x.x.x.x: deleting connection "west-pual" instance with peer x.x.x.x {isakmp=#0/ipsec=#0}<br>
Jun 8 15:00:01 vpn-server CRON[9226]: pam_unix(cron:session): session opened for user root by (uid=0)<br>
Jun 8 15:00:48 vpn-server CRON[9226]: pam_unix(cron:session): session closed for user root<br>
<br>
</font>