I should probably add my relevant .conf files:<div><br></div><div>/etc/ipsec.conf (kmos-vpn-bridge, local):</div><div><div>config setup</div><div> protostack=netkey</div><div>conn Tipton</div><div> #</div><div>
# ----------------------------------------------------------</div><div> # Use a Preshared Key. Disable Perfect Forward Secrecy.</div><div> # Initiate rekeying.</div><div> # Connection type _must_ be Transport Mode.</div>
<div> #</div><div> authby=secret</div><div> pfs=no</div><div> rekey=yes</div><div> keyingtries=3</div><div> type=transport</div><div> #</div><div> # ----------------------------------------------------------</div>
<div> # The local Linux machine that connects as a client.</div><div> #</div><div> # The external network interface is used to connect to the server.</div><div> # If you want to use a different interface or if there is no</div>
<div> # defaultroute, you can use: left=your.ip.addr.ess</div><div> left=%defaultroute</div><div> #</div><div> leftprotoport=17/1701</div><div> #</div><div> # ----------------------------------------------------------</div>
<div> # The remote server.</div><div> #</div><div> # Connect to the server at this IP address.</div><div> right=<REMOTE IP></div><div> #</div><div> rightprotoport=17/1701</div>
<div> # ----------------------------------------------------------</div><div> #</div><div> # Change 'ignore' to 'add' to enable this configuration.</div><div> #</div><div> auto=add</div>
<div> DPDACTion=restart_by_peer</div><div> dpdtimeout=30</div><div> dpddelay=3</div></div><div><br></div><div>/etc/xl2tpd/xl2tpd.conf (kmos-vpn-bridge, local):</div><div><div>[lac Tipton]</div><div>lns = <REMOTE IP></div>
<div>require chap = yes</div><div>refuse pap = yes</div><div>require authentication = yes</div><div>; Name should be the same as the username in the PPP authentication!</div><div>name = <USERNAME></div><div>ppp debug = yes</div>
<div>pppoptfile = /etc/ppp/options.l2tpd.client</div><div>length bit = yes</div></div><div><br></div><div>/etc/ipsec.conf (como-firewall, remote):</div><div><div><br></div><div>config setup</div><div> oe=off</div><div>
protostack=netkey</div><div> nat_traversal=yes</div><div><br></div><div>conn L2TP-PSK-NAT</div><div> rightsubnet=vhost:%no</div><div> also=L2TP-PSK-noNAT</div><div><br></div><div>conn L2TP-PSK-noNAT</div><div>
authby=secret</div><div> pfs=no</div><div> auto=add</div><div> keyingtries=3</div><div> rekey=no</div><div> ikelifetime=8h</div><div> keylife=1h</div><div> type=transport</div><div> left=<REMOTE IP></div>
<div> leftprotoport=17/1701</div><div> right=%any</div><div> rightprotoport=17/%any</div><div> dpdaction=restart_by_peer</div><div> dpdtimeout=30</div><div> dpddelay=3</div></div><div><br></div><div>/etc/xl2tpd/xl2tpd.conf (como-firewall, remote):</div>
<div><br></div><div><div>[global]</div><div> ipsec saref = no</div><div> listen-addr = <REMOTE IP></div><div><br></div><div>[lns default]</div><div> ip range = 192.168.1.100 - 192.168.1.255</div>
<div> local ip = 192.168.1.1</div><div> assign ip = yes</div><div> require chap = yes</div><div> refuse pap = yes</div><div> require authentication = yes</div><div> name = <NAME></div>
<div> ppp debug = no</div><div> pppoptfile = /etc/ppp/options.xl2tpd</div><div> length bit = yes</div><div><br></div><br clear="all"><div><br></div>-- <br><div><span>-</span></div><span>Kit</span> <span>Peters</span> (W0KEH), Engineer II<br>
KMOS TV Channel 6 / KTBG 90.9 FM<br>
University of Central Missouri<br>
<a href="http://kmos.org/" target="_blank">http://kmos.org/</a> | <a href="http://ktbg.fm/" target="_blank">http://ktbg.fm/</a><br>
</div>