<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=FR link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US>Hello,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>I am experiencing a weird problem with my server.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Randomly, some users (PC with 3G internet access) can get a timeout error when trying to connect to the server. The connection problem can sometimes be solved with a PC reboot but not anytime.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The strange thing is that while he’s trying to connect, I can separately connect with my 3G phone connection without any trouble.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>This problem occurs randomly but most often daytime.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>I didn’t experience it with my ADSL internet connection from home.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The only thing I noted in /var/log/auth.log is : <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:48:46 vpn pluto[1292]: packet from 80.214.9.52:3241: received and ignored informational message<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: ignoring Vendor ID payload [FRAGMENTATION]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: ignoring Vendor ID payload [Vid-Initial-Contact]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: responding to Main Mode from unknown peer 80.214.1.57<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:18 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: STATE_MAIN_R1: sent MR1, expecting MI2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: STATE_MAIN_R2: sent MR2, expecting MI3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: Main mode peer ID is ID_FQDN: '@eurocash-67caee'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: deleting connection "L2TP-PSK-NAT" instance with peer 80.214.1.57 {isakmp=#0/ipsec=#0}<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: new NAT mapping for #1028, was 80.214.1.57:15211, now 80.214.1.57:38379<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: peer client type is FQDN<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: Applying workaround for MS-818043 NAT-T bug<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: IDci was FQDN: \303\006\214+, using NAT_OA=10.211.63.77/32 0 as IDci<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: the peer proposed: xxx.xxx.xxx.xxx/32:17/1701 -> 10.211.63.77/32:17/0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: responding to Quick Mode proposal {msgid:6de05eb8}<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: us: xxx.xxx.xxx.xxx<xxx.xxx.xxx.xxx>[+S=C]:17/1701<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: them: 80.214.1.57[@eurocash-67caee,+S=C]:17/1701===10.211.63.77/32<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: netlink_raw_eroute: WARNING: that_client port 0 and that_host port 1701 don't match. Using that_client port.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0xb714c51c <0xb93bea89 xfrm=3DES_0-HMAC_MD5 NATOA=10.211.63.77 NATD=80.214.1.57:38379 DPD=none}<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:21 vpn pluto[1292]: initiate on demand from xxx.xxx.xxx.xxx:1701 to 80.214.1.57:1701 proto=17 state: fos_start because: acquire<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:54 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: received Delete SA(0xb714c51c) payload: deleting IPSEC State #1029<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:54 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: ERROR: netlink XFRM_MSG_DELPOLICY response for flow eroute_connection delete included errno 2: No such file or directory<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:54 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: received and ignored informational message<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:55 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: received Delete SA payload: deleting ISAKMP State #1028<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Nov 12 15:50:55 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57: deleting connection "L2TP-PSK-NAT" instance with peer 80.214.1.57 {isakmp=#0/ipsec=#0}<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>How can I solve this one?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Thanks for your valuable help.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>lionel<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>