<br><br><div class="gmail_quote">On Tue, Jan 11, 2011 at 2:45 PM, Pascal Fuks <span dir="ltr"><<a href="mailto:Pascal@financial-art.be">Pascal@financial-art.be</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word;color:rgb(0, 0, 0);font-size:14px;font-family:Calibri, sans-serif"><div><div><div>Hello,</div><div>Could you share your configurations?</div><div>I suppose that it has to do with dead peer detection.</div>
<div>Add the following line in your OpenSwan connection config, then restart OpenSwan:</div><div><span style="font-family:Times;font-size:medium"><pre>dpddelay=40
dpdtimeout=130
dpdaction=clear</pre></span></div></div></div></div></blockquote><div><br></div><div>vi /etc/ipsec.d/L2TP-PSK-NAT.conf </div><div><br></div><div>conn L2TP-PSK-NAT</div><div> overlapip=yes</div><div> rightsubnet=vhost:%priv</div>
<div> also=L2TP-PSK-noNAT</div><div><br></div><div>conn L2TP-PSK-noNAT</div><div> authby=secret</div><div> pfs=no</div><div> auto=add</div><div># keyingtries=3</div><div> rekey=no</div>
<div> ikelifetime=8h</div><div> keylife=1h</div><div> type=transport</div><div> left=my public ip</div><div> leftprotoport=17/1701</div><div> right=%any</div><div> rightprotoport=17/%any</div>
<div> dpddelay=40</div><div> dpdtimeout=130</div><div> dpdaction=clear</div><div><br></div><div> </div><div><br></div><div><div># /etc/ipsec.conf - Openswan IPsec configuration file</div><div>#</div><div>
# Manual: ipsec.conf.5</div><div>#</div><div># Please place your own config files in /etc/ipsec.d/ ending in .conf</div><div><br></div><div>version 2.0 # conforms to second version of ipsec.conf specification</div>
<div><br></div><div># basic configuration</div><div>config setup</div><div> # Debug-logging controls: "none" for (almost) none, "all" for lots.</div><div> # klipsdebug=none</div><div> # plutodebug="control parsing"</div>
<div> # For Red Hat Enterprise Linux and Fedora, leave protostack=netkey</div><div> protostack=netkey</div><div> nat_traversal=yes</div><div> virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12">10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12</a></div>
<div> oe=off</div><div> # Enable this if you see "failed to find any available worker"</div><div> nhelpers=0</div><div><br></div><div>#You may put your configuration (.conf) file in the "/etc/ipsec.d/" and uncomment this.</div>
<div>include /etc/ipsec.d/*.conf</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word;color:rgb(0, 0, 0);font-size:14px;font-family:Calibri, sans-serif"><div><div><div><span style="font-family:Times;font-size:medium"><pre></pre><div><span style="font-size:14px;font-family:Calibri, sans-serif"><div>
Regards</div></span></div></span></div><div><div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size:9pt;color:rgb(80, 80, 255);font-family:'Lucida Sans Unicode', sans-serif">Pascal Fuks<br>
Network & Security Consultant,<br>CEO / Administrateur délégué,<br><br></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span lang="EN-US" style="font-size:9pt;color:rgb(80, 80, 255);font-family:'Lucida Sans Unicode', sans-serif">Tel. : +32 2 387 08 00<br>
Fax : +32 2 387 07 06<br>Email : <a href="mailto:pascal@financial-art.be" target="_blank">pascal@financial-art.be</a></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:16px;font-family:'Times New Roman'">
<font color="#0000FF" face="Lucida Sans Unicode,sans-serif" size="3"><span style="font-size:12px">IM: pascal@financial-art (MSN)<br>Free/Busy Time: <a href="http://tinyurl.com/pfukscal" target="_blank">http://tinyurl.com/pfukscal</a></span></font></div>
<div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:9pt;font-family:'Lucida Sans Unicode', sans-serif;color:rgb(80, 80, 255)"><span lang="EN-US" style="color:rgb(176, 0, 0)"><br>
<a href="http://www.financial-art.be/" style="color:blue;text-decoration:underline" target="_blank"></a></span></span></div><div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif">
<span style="font-size:9pt;font-family:'Lucida Sans Unicode', sans-serif;color:rgb(80, 80, 255)"><span lang="EN-US" style="color:rgb(176, 0, 0)"><a href="http://www.financial-art.be/" style="text-decoration:none;color:blue" target="_blank">www.financial-art.be</a></span></span><span lang="EN-US" style="font-size:9pt;color:rgb(80, 80, 255);font-family:'Lucida Sans Unicode', sans-serif"></span></div>
<div style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-size:8pt;color:green">Avant d’imprimer cet email, réfléchissez à l’impact sur l’environnement. Please consider the environment before printing this mail.</span></div>
<p class="MsoNormal" style="margin-top:0cm;margin-bottom:0.0001pt;margin-right:0cm;margin-left:0cm;font-size:11pt;font-family:Calibri, sans-serif"> </p></div></div></div></div><div><br></div><span><div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;border-bottom:medium none;border-left:medium none;padding-bottom:0in;padding-left:0in;padding-right:0in;border-top:#b5c4df 1pt solid;border-right:medium none;padding-top:3pt">
<span style="font-weight:bold">From: </span> Spacelee <<a href="mailto:fjctlzy@gmail.com" target="_blank">fjctlzy@gmail.com</a>><br><span style="font-weight:bold">Reply-To: </span> <<a href="mailto:fjctlzy@gmail.com" target="_blank">fjctlzy@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span> Tue, 11 Jan 2011 12:39:51 +0800<br><span style="font-weight:bold">To: </span> users <<a href="mailto:users@openswan.org" target="_blank">users@openswan.org</a>><br><span style="font-weight:bold">Subject: </span> [SPAM-HEADER -] - [Openswan Users] ipsec destroyed by android<br>
</div><div><br></div><blockquote style="border-left:#b5c4df 5 solid;padding:0 0 0 5;margin:0 0 0 5">I have htc hero with android 2.1<div>and I setup a xl2tp+openswan(newest) </div><div>it's ok when I connect from mac os, windows....</div>
<div>it's ok when I connect from android, BUT, then, I couldn't connect from mac os or windows any more...</div><div>have you met such problem before? <br clear="all"><br>-- <br><div><b>Space Lee</b></div><br></div>
_______________________________________________
<a href="mailto:Users@openswan.org" target="_blank">Users@openswan.org</a>
<a href="http://lists.openswan.org/mailman/listinfo/users" target="_blank">http://lists.openswan.org/mailman/listinfo/users</a>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a>
Building and Integrating Virtual Private Networks with Openswan:
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</blockquote></span><br>**** DISCLAIMER ****<br>
<br>
"This e-mail and any attachment thereto may contain information which is confidential and/or protected by intellectual property rights and are intended for the sole use of the recipient(s) named above. <br>
Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s) is prohibited. <br>
If you have received this e-mail in error, please notify the sender either by telephone or by e-mail and delete the material from any computer".<br>
<br>
Thank you for your cooperation.<br>
<br>
* This e-mail was scanned against known viruses by MDaemon-DKAV</div>
</blockquote></div><br><br clear="all"><br>-- <br><div><b>Space Lee</b></div><br>