<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><div><div>Hello,</div><div>I did manage to make it work with my iPad and my Mac (working configuration below). But I can't make it work from a Windows 7 computer… Any idea???</div><div><br></div><div><div>l2tp:~# cat /etc/ipsec.conf</div><div>config setup</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>interfaces="%defaultroute"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>protostack=netkey</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>OE=off</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>nat_traversal=yes</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!10.31.135.0/24</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>uniqueids=yes</div><div><br></div><div>conn L2TP-PSK-NAT</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>overlapip=yes</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>rightsubnet=vhost:%priv</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>also=L2TP-PSK-noNAT</div><div><br></div><div>conn L2TP-PSK-noNAT</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>authby=secret</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>pfs=no</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>auto=add</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>keyingtries=3</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>rekey=no</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>ikelifetime=8h</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>keylife=1h</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>type=transport</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>#sareftrack=yes</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>#overlapip=yes</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>left=x.y.z.a</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>leftprotoport=17/1701</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>right=%any</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>rightprotoport=17/%any</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>rightid=%any</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>forceencaps=yes</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>dpddelay=40</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>dpdtimeout=130</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>dpdaction=clear</div><div><br></div></div><div><br></div><div><div>l2tp:~# cat /etc/xl2tpd/xl2tpd.conf </div><div>[global]</div><div><br></div><div>[lns default]</div><div>ip range = 10.31.135.2-10.31.135.250</div><div>local ip = 10.31.135.1</div><div>require chap = yes</div><div>refuse pap = yes</div><div>require authentication = yes</div><div>name = l2tpsvr</div><div>pppoptfile = /etc/ppp/options.xl2tpd</div><div>length bit = yes</div><div><br></div></div><div><br></div><div><div>l2tp:~# cat /etc/ppp/options.xl2tpd </div><div>ipcp-accept-local</div><div>ipcp-accept-remote</div><div>ms-dns x.y.z.a</div><div>ms-dns b.c.d.e</div><div>noccp</div><div>auth</div><div>crtscts</div><div>idle 1800</div><div>mtu 1200</div><div>mru 1200</div><div>nodefaultroute</div><div>#debug</div><div>lock</div><div>proxyarp</div><div>connect-delay 5000</div></div><div><br></div><div><br></div><div><div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Pascal Fuks<br>Network & Security Consultant,<br>CEO / Administrateur délégué,<br><br></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Tel. : +32 2 387 08 00<br>Fax : +32 2 387 07 06<br>Email : pascal@financial-art.be</span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 16px; font-family: 'Times New Roman'; "><font class="Apple-style-span" color="#0000FF" face="Lucida Sans Unicode,sans-serif" size="3"><span class="Apple-style-span" style="font-size: 12px; ">IM: pascal@financial-art (MSN)</span><span class="Apple-style-span" style="font-size: 12px; "><br></span><span class="Apple-style-span" style="font-size: 12px; ">Free/Busy Time: http://tinyurl.com/pfukscal</span></font></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 9pt; font-family: 'Lucida Sans Unicode', sans-serif; color: rgb(80, 80, 255); "><span lang="EN-US" style="color: rgb(176, 0, 0); "><br><a href="http://www.financial-art.be/" target="_blank" style="color: blue; text-decoration: underline; "></a></span></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 9pt; font-family: 'Lucida Sans Unicode', sans-serif; color: rgb(80, 80, 255); "><span lang="EN-US" style="color: rgb(176, 0, 0); "><a href="http://www.financial-art.be/" target="_blank" style="text-decoration: none; color: blue; ">www.financial-art.be</a></span></span><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; "></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 8pt; color: green; ">Avant d’imprimer cet email, réfléchissez à l’impact sur l’environnement. Please consider the environment before printing this mail.</span></div><p class="MsoNormal" style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "> </p></div></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Pascal Fuks <<a href="mailto:pascal@financial-art.be">pascal@financial-art.be</a>><br><span style="font-weight:bold">Date: </span> Tue, 11 Jan 2011 15:57:28 +0100<br><span style="font-weight:bold">To: </span> users <<a href="mailto:users@openswan.org">users@openswan.org</a>><br><span style="font-weight:bold">Cc: </span> <<a href="mailto:fjctlzy@gmail.com">fjctlzy@gmail.com</a>><br><span style="font-weight:bold">Subject: </span> Re: [Openswan Users] Trouble with OpenSwan and xl2tpd<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><div><div><div>l2tp:~# ipsec verify</div><div>Checking your system to see if IPsec got installed and started correctly:</div><div>Version check and ipsec on-path <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Linux Openswan 2.6.32 (klips)</div><div>Checking for IPsec support in kernel <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div> KLIPS: checking for NAT Traversal support <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div> KLIPS: checking for OCF crypto offload support <span class="Apple-tab-span" style="white-space:pre"> </span>[N/A]</div><div> SAref kernel support <span class="Apple-tab-span" style="white-space:pre"> </span>[N/A]</div><div>Checking that pluto is running <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div> Pluto listening for IKE on udp 500 <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div> Pluto listening for NAT-T on udp 4500 <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Two or more interfaces found, checking IP forwarding <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Checking NAT and MASQUERADEing <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Checking for 'ip' command <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Checking /bin/sh is not /bin/dash <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Checking for 'iptables' command <span class="Apple-tab-span" style="white-space:pre"> </span>[OK]</div><div>Opportunistic Encryption Support <span class="Apple-tab-span" style="white-space:pre"> </span>[DISABLED]</div></div><div><br></div><div><div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Pascal Fuks<br>Network & Security Consultant,<br>CEO / Administrateur délégué,<br><br></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Tel. : +32 2 387 08 00<br>Fax : +32 2 387 07 06<br>Email : <a href="mailto:pascal@financial-art.be">pascal@financial-art.be</a></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 16px; font-family: 'Times New Roman'; "><font class="Apple-style-span" color="#0000FF" face="Lucida Sans Unicode,sans-serif" size="3"><span class="Apple-style-span" style="font-size: 12px; ">IM: pascal@financial-art (MSN)</span><span class="Apple-style-span" style="font-size: 12px; "><br></span><span class="Apple-style-span" style="font-size: 12px; ">Free/Busy Time: <a href="http://tinyurl.com/pfukscal">http://tinyurl.com/pfukscal</a></span></font></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 9pt; font-family: 'Lucida Sans Unicode', sans-serif; color: rgb(80, 80, 255); "><span lang="EN-US" style="color: rgb(176, 0, 0); "><br><a href="http://www.financial-art.be/" target="_blank" style="color: blue; text-decoration: underline; "></a></span></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 9pt; font-family: 'Lucida Sans Unicode', sans-serif; color: rgb(80, 80, 255); "><span lang="EN-US" style="color: rgb(176, 0, 0); "><a href="http://www.financial-art.be/" target="_blank" style="text-decoration: none; color: blue; ">www.financial-art.be</a></span></span><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; "></span></div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 8pt; color: green; ">Avant d’imprimer cet email, réfléchissez à l’impact sur l’environnement. Please consider the environment before printing this mail.</span></div><p class="MsoNormal" style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 11pt; font-family: Calibri, sans-serif; "> </p></div></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Spacelee<br><span style="font-weight:bold">Date: </span> Tue, 11 Jan 2011 14:41:46 +0800<br><span style="font-weight:bold">To: </span> Pascal Fuks <<a href="mailto:pascal@financial-art.be">pascal@financial-art.be</a>><br><span style="font-weight:bold">Subject: </span> Re: [Openswan Users] Trouble with OpenSwan and xl2tpd<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">what's the result of ipsec verify<br><br><div class="gmail_quote">On Tue, Jan 11, 2011 at 2:43 PM, Pascal Fuks <span dir="ltr"><<a href="mailto:Pascal@financial-art.be">Pascal@financial-art.be</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div style="word-wrap:break-word;color:rgb(0, 0, 0);font-size:14px;font-family:Calibri, sans-serif"><div><div><div>Hello,</div><div>In fact I never see the pppd program starting.</div><div>Does anybody have any idea on what I should do?</div><div>Regards</div><div class="im"><div><br></div><div><div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Pascal Fuks<br>
Network & Security Consultant,<br>CEO / Administrateur délégué,<br><br></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Tel. : +32 2 387 08 00<br>
Fax : +32 2 387 07 06<br>Email : <a href="mailto:pascal@financial-art.be" target="_blank">pascal@financial-art.be</a></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:16px;font-family:'Times New Roman'"><font color="#0000FF" face="Lucida Sans Unicode,sans-serif" size="3"><span style="font-size:12px">IM: pascal@financial-art (MSN)<br>Free/Busy Time: <a href="http://tinyurl.com/pfukscal" target="_blank">http://tinyurl.com/pfukscal</a></span></font></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:9pt;font-family:'Lucida Sans Unicode', sans-serif;color:rgb(80, 80, 255)"><span lang="EN-US" style="color:rgb(176, 0, 0)"><br><a href="http://www.financial-art.be/" style="color:blue;text-decoration:underline" target="_blank"></a></span></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:9pt;font-family:'Lucida Sans Unicode', sans-serif;color:rgb(80, 80, 255)"><span lang="EN-US" style="color:rgb(176, 0, 0)"><a href="http://www.financial-art.be/" style="text-decoration:none;color:blue" target="_blank">www.financial-art.be</a></span></span><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; "></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:8pt;color:green">Avant d’imprimer cet email, réfléchissez à l’impact sur l’environnement. Please consider the environment before printing this mail.</span></div><p class="MsoNormal" style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"> </p></div></div></div></div></div><div><br></div><span><div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;border-bottom:medium none;border-left:medium none;padding-bottom:0in;padding-left:0in;padding-right:0in;border-top:#b5c4df 1pt solid;border-right:medium none;padding-top:3pt"><span style="font-weight:bold">From: </span> Pascal Fuks <<a href="mailto:pascal@financial-art.be" target="_blank">pascal@financial-art.be</a>><br><span style="font-weight:bold">Date: </span> Mon, 10 Jan 2011 10:17:17 +0100<br><span style="font-weight:bold">To: </span> <<a href="mailto:users@openswan.org" target="_blank">users@openswan.org</a>><br><span style="font-weight:bold">Subject: </span> Trouble with OpenSwan and xl2tpd<br></div><div><div></div><div class="h5"><div><br></div><blockquote style="border-left:#b5c4df 5 solid;padding:0 0 0 5;margin:0 0 0 5"><div><div style="word-wrap:break-word;color:rgb(0, 0, 0);font-size:14px;font-family:Calibri, sans-serif"><div><div><div>Hello,</div><div>I'm trying to set up a tunnel from an iPad to a Linux Box xl2tpd server (attached to the network)</div><div> - Debian 5.0.7</div><div> - kernel 2.6.26-2-xen-amd64</div><div> - self compiled version of Linux Openswan 2.6.32 (klips)</div><div> - self compiled version 1.2.7 of xl2tpd (but strangely reporting xl2tpd version xl2tpd-1.2.6)</div><div> - debian pppd version 2.4.4</div><div> - eth0 = mypublicip (X.y.z.a)</div><div> - dummy0 = myprivateip (10.31.135.254) - testbox</div><div><br></div><div>Ipsec tunnel is up without any trouble…. (so ipsec.secrets is ok)</div><div>But l2tp never worked</div><div><br></div><div><br></div><div>**************</div><div><div><span style="font-family:Courier">/etc/ipsec.conf</span></div><div><font face="Courier"><span style="font-family: Calibri, sans-serif; "><div>**************</div><div></div></span></font></div><div><font face="Courier">config setup</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">interfaces="%defaultroute"</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">protostack=klips</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">OE=off</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">nat_traversal=yes</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!10.31.135.0/24" target="_blank">10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!10.31.135.0/24</a></font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">interfaces="ipsec0=eth0"</font></div><div><font face="Courier"><br></font></div><div><font face="Courier">conn L2TP-PSK-NAT</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">rightsubnet=vhost:%priv</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">also=L2TP-PSK-noNAT</font></div><div><font face="Courier"><br></font></div><div><font face="Courier">conn L2TP-PSK-noNAT</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">authby=secret</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">pfs=no</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">auto=add</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">keyingtries=3</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">rekey=no</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">ikelifetime=8h</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">keylife=1h</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">type=transport</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">left=X.y.z.a</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">leftprotoport=17/1701</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">right=%any</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">rightprotoport=17/%any</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">forceencaps=yes</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">dpddelay=40</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">dpdtimeout=130</font></div><div><span style="white-space:pre-wrap"><font face="Courier"> </font></span><font face="Courier">dpdaction=clear</font></div><div><font face="Courier"><br></font></div><div><font face="Courier"><br></font></div><div><font face="Courier"><span style="font-family:Calibri, sans-serif"><div><span style="font-family:Courier">**************</span></div><div><div><span style="font-family:Courier">/etc/ipsec.secrets</span></div><div><font face="Courier"><span style="font-family:Calibri, sans-serif"><div><span style="font-family:Courier">**************</span></div><span style="font-family:Courier"><div></div></span></span></font></div></div></span></font></div><div><span style="font-family:Courier">X.y.z.a %any : PSK "AVerySecretPassword"</span></div></div><div><br></div><div><div><span style="font-family:Courier">**************</span></div><span style="font-family:Courier"><div></div></span><div><font face="Courier">/etc/xl2tpd/xl2tpd.conf </font></div><div><span style="font-family:Courier">**************</span></div><span style="font-family:Courier"><div></div></span><div><span style="font-family:Courier">[global]</span></div><div><span style="font-family:Courier">debug tunnel = yes</span></div><div><font face="Courier">debug network = yes</font></div><div><font face="Courier">debug state = yes</font></div><div><font face="Courier">debug avp = yes</font></div><div><font face="Courier"><br></font></div><div><font face="Courier">[lns default]</font></div><div><font face="Courier">ip range = 10.31.135.2-10.31.135.250</font></div><div><font face="Courier">local ip = 10.31.135.1</font></div><div><font face="Courier">require chap = yes</font></div><div><font face="Courier">refuse pap = yes</font></div><div><font face="Courier">require authentication = yes</font></div><div><font face="Courier">name = l2tpsvr</font></div><div><font face="Courier">ppp debug = yes</font></div><div><font face="Courier">pppoptfile = /etc/ppp/options.xl2tpd</font></div><div><font face="Courier">length bit = yes</font></div></div><div><font face="Courier"><br></font></div><div><font face="Courier"><span style="font-family: Calibri, sans-serif; "><div><span style="font-family:Courier">**************</span></div><span style="font-family:Courier"><div></div></span><div><font face="Courier">/etc/ppp/options.xl2tpd </font></div><div><span style="font-family:Courier">**************</span></div><span style="font-family:Courier"><div></div></span></span></font></div><div><div><span style="font-family:Courier">ipcp-accept-local</span></div><div><span style="font-family:Courier">ipcp-accept-remote</span></div><div><span style="font-family:Courier">ms-dns 81.92.x.y</span></div><div><span style="font-family:Courier">ms-dns 81.92.a.b</span></div><div><span style="font-family:Courier">noccp</span></div><div><span style="font-family:Courier">auth</span></div><div><span style="font-family:Courier">crtscts</span></div><div><span style="font-family:Courier">idle 1800</span></div><div><span style="font-family:Courier">mtu 1200</span></div><div><span style="font-family:Courier">mru 1200</span></div><div><span style="font-family:Courier">nodefaultroute</span></div><div><span style="font-family:Courier">debug</span></div><div><span style="font-family:Courier">lock</span></div><div><span style="font-family:Courier">proxyarp</span></div><div><span style="font-family:Courier">connect-delay 5000</span></div><div><font face="Courier"><br></font></div></div><div><br></div><div><div><span style="font-family:Courier">l2tp:/usr/src/xl2tpd-1.2.7# xl2tpd -D</span></div><div><span style="font-family:Courier">xl2tpd[5300]: setsockopt recvref[22]: Protocol not available</span></div><div><span style="font-family:Courier">xl2tpd[5300]: This binary does not support kernel L2TP.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: xl2tpd version xl2tpd-1.2.6 started on <a href="http://l2tp.financialart.be" target="_blank">l2tp.financialart.be</a> PID:5300</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Forked by Scott Balmos and David Stipp, (C) 2001</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Inherited by Jeff McAdams, (C) 2002</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Forked again by Xelerance (<a href="http://www.xelerance.com" target="_blank">www.xelerance.com</a>) (C) 2006</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Listening on IP address 0.0.0.0, port 1701</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 40687, call 0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: sending SCCRP</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 21206, call 0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: Peer requested tunnel 76 twice, ignoring second one.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 21206</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 16811, call 58064</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: Peer requested tunnel 76 twice, ignoring second one.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 16811</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 54191, call 56833</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: Peer requested tunnel 76 twice, ignoring second one.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 54191</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Maximum retries exceeded for tunnel 40687. Closing.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 10323, call 0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: Peer requested tunnel 76 twice, ignoring second one.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 10323</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 40687</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Connection 76 closed to 109.129.28.162, port 50750 (Timeout)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 57821, call 4499</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: Peer requested tunnel 76 twice, ignoring second one.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 57821</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: select timeout</span></div><div><span style="font-family:Courier">xl2tpd[5300]: Unable to deliver closing message for tunnel 40687. Destroying anyway.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: network_thread: recv packet from 109.129.28.162, size = 60, tunnel = 0, call = 0 ref=0 refhim=0</span></div><div><span style="font-family:Courier">xl2tpd[5300]: get_call: allocating new tunnel for host 109.129.28.162, port 50750.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: handle_avps: handling avp's for tunnel 16436, call 38118</span></div><div><span style="font-family:Courier">xl2tpd[5300]: message_type_avp: message type 1 (Start-Control-Connection-Request)</span></div><div><span style="font-family:Courier">xl2tpd[5300]: protocol_version_avp: peer is using version 1, revision 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: framing_caps_avp: supported peer frames: async sync</span></div><div><span style="font-family:Courier">xl2tpd[5300]: hostname_avp: peer reports hostname ''</span></div><div><span style="font-family:Courier">xl2tpd[5300]: assigned_tunnel_avp: using peer's tunnel 76</span></div><div><span style="font-family:Courier">xl2tpd[5300]: receive_window_size_avp: peer wants RWS of 4. Will use flow control.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: message type is Start-Control-Connection-Request(1). Tunnel is 76, call is 0.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: control_finish: Peer requested tunnel 76 twice, ignoring second one.</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 16436</span></div><div><span style="font-family:Courier">xl2tpd[5300]: build_fdset: closing down tunnel 40687</span></div></div><div><br></div><div><br></div><div><br></div><div><br></div><div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp ipsec__plutorun: Starting Pluto subsystem...</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Starting Pluto (Openswan Version 2.6.32; Vendor ID OEhyLdACecfa) pid:3276</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: LEAK_DETECTIVE support [disabled]</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: OCF support for IKE [disabled]</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: SAref support [disabled]: Protocol not available</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: SAbind support [disabled]: Protocol not available</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: NSS support [disabled]</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: HAVE_STATSD notification support not compiled in</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Setting NAT-Traversal port-4500 floating to on</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: port floating activation criteria nat_t=1/port_float=1</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: NAT-Traversal support [enabled]</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: using /dev/urandom as source of random entropy</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: no helpers will be started, all cryptographic operations will be done inline</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Using KLIPS IPsec interface code on 2.6.26-2-xen-amd64</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Changed path to directory '/etc/ipsec.d/cacerts'</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Changed path to directory '/etc/ipsec.d/aacerts'</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Changed path to directory '/etc/ipsec.d/ocspcerts'</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Changing to directory '/etc/ipsec.d/crls'</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: Warning: empty directory</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: added connection description "L2TP-PSK-NAT"</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: added connection description "L2TP-PSK-noNAT"</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: listening for IKE messages</span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: adding interface ipsec0/eth0 <a href="http://81.92.226.188:500" target="_blank">81.92.226.188:500</a></span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: adding interface ipsec0/eth0 <a href="http://81.92.226.188:4500" target="_blank">81.92.226.188:4500</a></span></div><div><span style="font-family:Courier">Jan 10 09:32:08 l2tp pluto[3276]: loading secrets from "/etc/ipsec.secrets"</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: received Vendor ID payload [RFC 3947] method set to=109 </span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110 </span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: packet from <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>: received Vendor ID payload [Dead Peer Detection]</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: responding to Main Mode from unknown peer 109.129.28.162</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: STATE_MAIN_R1: sent MR1, expecting MI2</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): both are NATed</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: STATE_MAIN_R2: sent MR2, expecting MI3</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.11'</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[6] 109.129.28.162 #7: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #7: deleting connection "L2TP-PSK-NAT" instance with peer 109.129.28.162 {isakmp=#0/ipsec=#0}</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #7: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #7: new NAT mapping for #7, was <a href="http://109.129.28.162:500" target="_blank">109.129.28.162:500</a>, now <a href="http://109.129.28.162:4500" target="_blank">109.129.28.162:4500</a></span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #7: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}</span></div><div><span style="font-family:Courier">Jan 10 10:10:31 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #7: Dead Peer Detection (RFC 3706): enabled</span></div><div><span style="font-family:Courier">Jan 10 10:10:32 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #7: the peer proposed: <a href="http://81.92.226.188/32:17/1701" target="_blank">81.92.226.188/32:17/1701</a> -> <a href="http://192.168.1.11/32:17/0" target="_blank">192.168.1.11/32:17/0</a></span></div><div><span style="font-family:Courier">Jan 10 10:10:32 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: responding to Quick Mode proposal {msgid:cbe4e6f7}</span></div><div><span style="font-family:Courier">Jan 10 10:10:32 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: us: 81.92.226.188<81.92.226.188>[+S=C]:17/1701</span></div><div><span style="font-family:Courier">Jan 10 10:10:32 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: them: 109.129.28.162[192.168.1.11,+S=C]:17/50750===<a href="http://192.168.1.11/32" target="_blank">192.168.1.11/32</a></span></div><div><span style="font-family:Courier">Jan 10 10:10:32 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1</span></div><div><span style="font-family:Courier">Jan 10 10:10:32 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2</span></div><div><span style="font-family:Courier">Jan 10 10:10:33 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: Dead Peer Detection (RFC 3706): enabled</span></div><div><span style="font-family:Courier">Jan 10 10:10:33 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2</span></div><div><span style="font-family:Courier">Jan 10 10:10:33 l2tp pluto[3276]: "L2TP-PSK-NAT"[7] 109.129.28.162 #8: STATE_QUICK_R2: IPsec SA established transport mode {ESP/NAT=>0x0c8ad036 <0x94f2b892 xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=<a href="http://109.129.28.162:4500" target="_blank">109.129.28.162:4500</a> DPD=enabled}</span></div></div><div><br></div><div><div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Pascal Fuks<br>
Network & Security Consultant,<br>CEO / Administrateur délégué,<br><br></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Tel. : +32 2 387 08 00<br>
Fax : +32 2 387 07 06<br><span style="color:rgb(0, 0, 0);font-family:Calibri, sans-serif;font-size:14px"><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; ">Email : <a href="mailto:pascal@financial-art.be" target="_blank">pascal@financial-art.be</a></span></div></span></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-family:'Times New Roman';font-size:16px"><font color="#0000FF" face="Lucida Sans Unicode,sans-serif" size="3"><span style="font-size:12px">IM: pascal@financial-art (MSN)</span><span style="font-size:12px"><br></span><span style="font-size:12px">Free/Busy Time: <a href="http://tinyurl.com/pfukscal" target="_blank">http://tinyurl.com/pfukscal</a></span></font></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:9pt;font-family:'Lucida Sans Unicode', sans-serif;color:rgb(80, 80, 255)"><span lang="EN-US" style="color:rgb(176, 0, 0)"><br><a href="http://www.financial-art.be/" style="color:blue;text-decoration:underline" target="_blank"></a></span></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:9pt;font-family:'Lucida Sans Unicode', sans-serif;color:rgb(80, 80, 255)"><span lang="EN-US" style="color:rgb(176, 0, 0)"><a href="http://www.financial-art.be/" style="text-decoration:none;color:blue" target="_blank">www.financial-art.be</a></span></span><span lang="EN-US" style="font-size: 9pt; color: rgb(80, 80, 255); font-family: 'Lucida Sans Unicode', sans-serif; "></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:8pt;color:green">Avant d’imprimer cet email, réfléchissez à l’impact sur l’environnement. Please consider the environment before printing this mail.</span></div><p class="MsoNormal" style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"> </p></div></div></div></div></div></div></blockquote></div></div></span><div><div></div><div class="h5"><br>**** DISCLAIMER ****<br><br>
"This e-mail and any attachment thereto may contain information which is confidential and/or protected by intellectual property rights and are intended for the sole use of the recipient(s) named above. <br>
Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s) is prohibited. <br>
If you have received this e-mail in error, please notify the sender either by telephone or by e-mail and delete the material from any computer".<br><br>
Thank you for your cooperation.<br><br>
* This e-mail was scanned against known viruses by MDaemon-DKAV</div></div></div><br>_______________________________________________<br><a href="mailto:Users@openswan.org">Users@openswan.org</a><br><a href="http://lists.openswan.org/mailman/listinfo/users" target="_blank">http://lists.openswan.org/mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br><a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br><br></blockquote></div><br><br clear="all"><br>-- <br><div><b>Space Lee</b></div><br></blockquote></span></div></div></blockquote></span><br>**** DISCLAIMER ****<br>
<br>
"This e-mail and any attachment thereto may contain information which is confidential and/or protected by intellectual property rights and are intended for the sole use of the recipient(s) named above. <br>
Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s) is prohibited. <br>
If you have received this e-mail in error, please notify the sender either by telephone or by e-mail and delete the material from any computer".<br>
<br>
Thank you for your cooperation.<br>
<br>
* This e-mail was scanned against known viruses by MDaemon-DKAV</body></html>