<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
<br>
<meta http-equiv="Content-Type" content="text/html; charset=unicode">
<meta name="Generator" content="Microsoft SafeHTML">
<style>
.ExternalClass .ecxhmmessage P
{padding:0px;}
.ExternalClass body.ecxhmmessage
{font-size:10pt;font-family:Tahoma;</style>Paul, thanks for the reply.. i appreciate you trying to help me.<br><br>> Are you running with protostack=mast and a kernel with SAREF patches?<br>> (see ipsec verify)<br><br>This is my ipsec verify<br><br>Version check and ipsec on-path [OK]<br>Linux Openswan U2.6.31/K2.6.32-309-ec2 (netkey)<br>Checking for IPsec support in kernel [OK]<br>SAref kernel support [N/A]<br>NETKEY detected, testing for disabled ICMP send_redirects [OK]<br>NETKEY detected, testing for disabled ICMP accept_redirects [OK]<br>Checking that pluto is running [OK]<br>Pluto listening for IKE on udp 500 [OK]<br>Pluto listening for NAT-T on udp 4500 [OK]<br>Two or more interfaces found, checking IP forwarding [FAILED]<br>Checking for 'ip' command [OK]<br>Checking for 'iptables' command [OK]<br>Opportunistic Encryption Support [DISABLED]<br><br><br>> If not, you MUST set ipsec saref = no or else all your packets will fail.<br><br>Iam guessing the NA means that iam not running a kernel with such patches... even though I tried setting ipsec saref = no and I still cannot establish the l2tp connection. Below is the output of auth.log<br><br><br><br>Jan 4 03:10:46 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: responding to Main Mode from unknown peer 56.199.62.74<br>Jan 4 03:10:46 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>Jan 4 03:10:46 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: STATE_MAIN_R1: sent MR1, expecting MI2<br>Jan 4 03:10:46 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: both are NATed<br>Jan 4 03:10:46 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<br>Jan 4 03:10:46 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: STATE_MAIN_R2: sent MR2, expecting MI3<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: Main mode peer ID is ID_FQDN: '@JP1'<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: new NAT mapping for #55, was 56.199.62.74:500, now 56.199.62.74:4500<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: peer client type is FQDN<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: Applying workaround for MS-818043 NAT-T bug<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: IDci was FQDN: 2\020\205\356, using NAT_OA=192.170.1.3/32 0 as IDci<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: the peer proposed: 194.15.13.23/32:17/1701 -> 192.170.1.3/32:17/1701<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: responding to Quick Mode proposal {msgid:e6efdf09}<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: us: 10.194.5.212<10.194.5.212>[+S=C]:17/1701<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: them: 56.199.62.74[@JP1,+S=C]:17/1701===192.170.1.3/32<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: keeping refhim=4294901761 during rekey<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #43: received Delete SA payload: deleting ISAKMP State #43<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: netlink_raw_eroute: WARNING: that_client port 0 and that_host port 4500 don't match. Using that_client port.<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #56: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0xae4ae36d <0xfa61537c xfrm=3DES_0-HMAC_MD5 NATOA=192.170.1.3 NATD=56.199.62.74:4500 DPD=none}<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Vendor ID payload [FRAGMENTATION]<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Vendor ID payload [Vid-Initial-Contact]<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: responding to Main Mode from unknown peer 56.199.62.74<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>Jan 4 03:10:47 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: STATE_MAIN_R1: sent MR1, expecting MI2<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: both are NATed<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: STATE_MAIN_R2: sent MR2, expecting MI3<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: Main mode peer ID is ID_FQDN: '@JP1'<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: new NAT mapping for #57, was 56.199.62.74:500, now 56.199.62.74:4500<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: peer client type is FQDN<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: Applying workaround for MS-818043 NAT-T bug<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: IDci was FQDN: 2\020\205\356, using NAT_OA=192.170.1.3/32 0 as IDci<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: the peer proposed: 194.15.13.23/32:17/1701 -> 192.170.1.3/32:17/1701<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: responding to Quick Mode proposal {msgid:ca7d2499}<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: us: 10.194.5.212<10.194.5.212>[+S=C]:17/1701<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: them: 56.199.62.74[@JP1,+S=C]:17/1701===192.170.1.3/32<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: keeping refhim=4294901761 during rekey<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #45: received Delete SA payload: deleting ISAKMP State #45<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: netlink_raw_eroute: WARNING: that_client port 0 and that_host port 4500 don't match. Using that_client port.<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #58: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x24ac6268 <0x531a4a93 xfrm=3DES_0-HMAC_MD5 NATOA=192.170.1.3 NATD=56.199.62.74:4500 DPD=none}<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Vendor ID payload [FRAGMENTATION]<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Vendor ID payload [Vid-Initial-Contact]<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #59: responding to Main Mode from unknown peer 56.199.62.74<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #59: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #59: STATE_MAIN_R1: sent MR1, expecting MI2<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: received Delete SA(0x24ac6268) payload: deleting IPSEC State #58<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: ERROR: netlink XFRM_MSG_DELPOLICY response for flow eroute_connection delete included errno 2: No such file or directory<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: received Delete SA(0xae4ae36d) payload: deleting IPSEC State #56<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #53: received Delete SA(0xde18d781) payload: deleting IPSEC State #54<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #53: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #51: received Delete SA(0x096753c6) payload: deleting IPSEC State #52<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #51: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #49: received Delete SA(0xe35d8e07) payload: deleting IPSEC State #50<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #49: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #57: received Delete SA payload: deleting ISAKMP State #57<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: ignoring Delete SA payload: not encrypted<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #55: received Delete SA payload: deleting ISAKMP State #55<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #53: received Delete SA payload: deleting ISAKMP State #53<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #51: received Delete SA payload: deleting ISAKMP State #51<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #49: received Delete SA payload: deleting ISAKMP State #49<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #47: received Delete SA payload: deleting ISAKMP State #47<br>Jan 4 03:10:48 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: received and ignored informational message<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xf2428ff5<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x1faa46de<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xcb6faf8f<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x47798c53<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xcefef2d2<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xdb951f6a<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xa8f0a3e2<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x3b64c29c<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x8f802347<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x02dd7b5b<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x6c0ccb4c<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xdd64f87a<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x5c4acc01<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x843a42b2<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x5500dc81<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x377e3b98<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x133c5de7<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x74191d82<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x72caa241<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x6b9466c1<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x1d94d969<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xc04a1c2f<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xda56486a<br>Jan 4 03:10:49 ip-10-194-5-212 pluto[14739]: packet from 56.199.62.74:4500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x9b8f405f<br>Jan 4 03:11:58 ip-10-194-5-212 pluto[14739]: "L2TP-PSK-NAT"[2] 56.199.62.74 #59: max number of retransmissions (2) reached STATE_MAIN_R1<br><br>Gunther<br> </body>
</html>