<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7651.59">
<TITLE>RE: [Openswan Users] Setting leftsubnet stops xl2tpd from working</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Have you turned on debugging for xl2tpd ?<BR>
<BR>
It sounds like ppp isn't authenticating for some reason.<BR>
<BR>
xl2tp should not have a left subnet value at all because it is a point to point connection.<BR>
<BR>
Regards,<BR>
Randy<BR>
<BR>
<BR>
-----Original Message-----<BR>
From: users-bounces@openswan.org on behalf of George Pollard<BR>
Sent: Mon 8/9/2010 4:27 PM<BR>
To: Willie Gillespie<BR>
Cc: users@openswan.org<BR>
Subject: Re: [Openswan Users] Setting leftsubnet stops xl2tpd from working<BR>
<BR>
On 10 August 2010 09:32, Willie Gillespie<BR>
<wgillespie+openswan@es2eng.com> wrote:<BR>
> I had a similar problem just a few months ago with xl2tpd not being<BR>
> encapsulated in the tunnel in some cases. I just wish I could remember what<BR>
> I did.<BR>
><BR>
> My config files look about the same as yours except for I have<BR>
> rightprotoport=17/1701 -- I don't think I ever got %any to work (luckily, I<BR>
> didn't actually need to).<BR>
><BR>
> If you do a tcpdump, are your L2TP packets being encapsulated? (when it's<BR>
> not working)<BR>
<BR>
I switched to /1701 and nothing changed. My client is a Windows 7<BR>
machine, so I traced with Wireshark.<BR>
<BR>
There's a bunch of (6 main mode+ 3 quick mode) ISAKMP packets, then 6<BR>
ESP packets (these must be the encapsulated L2TP packets?), then some<BR>
informational ISAKMP packets (4) when the connection closes.<BR>
<BR>
I don't see any non-encapsulated L2TP packets.<BR>
<BR>
Regards,<BR>
- George<BR>
_______________________________________________<BR>
Users@openswan.org<BR>
<A HREF="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</A><BR>
Micropayments: <A HREF="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</A><BR>
Building and Integrating Virtual Private Networks with Openswan:<BR>
<A HREF="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</A><BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>