<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta content="text/html;charset=UTF-8" http-equiv="Content-Type"></head><body ><div style='font-size:10pt;font-family:Verdana,Arial,Helvetica,sans-serif;'>since weeks i want to setup xl2tpd and openswan in the debian wheezy i read many articles from the net but still cannot scuccessfully setup the tunnel , it looks like IPsec tunnel is up:<br><br><blockquote style="border: 1px solid rgb(204, 204, 204); padding: 7px; background-color: rgb(245, 245, 245);"><div> # ipsec auto --up mypc<br><br>104 "mypc" #1: STATE_MAIN_I1: initiate<br>003 "mypc" #1: ignoring unknown Vendor ID payload [882fe56d6fd20dbc2251613b2ebe5beb]<br>003 "mypc" #1: received Vendor ID payload [XAUTH]<br>003 "mypc" #1: received Vendor ID payload [Dead Peer Detection]<br>003 "mypc" #1: received Vendor ID payload [RFC 3947] method set to=109 <br>106 "mypc" #1: STATE_MAIN_I2: sent MI2, expecting MR2<br>003 "mypc" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected<br>108 "mypc" #1: STATE_MAIN_I3: sent MI3, expecting MR3<br>004 "mypc" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_128 prf=oakley_sha group=modp2048}<br>117 "mypc" #2: STATE_QUICK_I1: initiate<br>004 "mypc" #2: STATE_QUICK_I2: sent QI2, IPsec SA established transport mode {ESP=>0xc06408fa <0x1d27ed6c xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=enabled}<br><br></div></blockquote>This is xl2tpd.conf:<br><br><blockquote style="border: 1px solid rgb(204, 204, 204); padding: 7px; background-color: rgb(245, 245, 245);"><div> [global] <br>access control = no<br>port = 1701 <br>ipsec saref = yes<br><br>[lac securitykiss]<br>lns = 217.147.94.149<br>ip range = 10.1.2.2-10.1.2.255<br>assign ip = yes<br>require chap = yes<br>refuse pap = yes<br>require authentication = yes<br>ppp debug = yes<br>pppoptfile = /etc/ppp/options.xl2tpd<br>length bit = yes<br>name = securitykiss<br></div></blockquote>217.147.94.149 is the my vpn server securitykiss ip address, and this is the options.xl2tpd:<br><br><blockquote style="border: 1px solid rgb(204, 204, 204); padding: 7px; background-color: rgb(245, 245, 245);"><div>#cat /etc/ppp/options.xl2tpd<br><br>ipcp-accept-local<br>ipcp-accept-remote<br>require-mschap-v2<br>ms-dns 8.8.8.8<br>ms-dns 8.8.4.4<br>asyncmap 0<br>auth<br>crtscts<br>idle 1800<br>mtu 1410<br>mru 1410<br>nodefaultroute<br>proxyarp<br>connect-delay 5000<br>plugin pppol2tp.so<br>lock<br>modem<br>debug<br>noccp<br>name securitykiss<br>proxyarp<br>lcp-echo-interval 30<br>lcp-echo-failure 4 <br></div></blockquote><br>This is chap-secrets:<br><br><blockquote style="border: 1px solid rgb(204, 204, 204); padding: 7px; background-color: rgb(245, 245, 245);"><div> # client server secret IP addresses<br>vpn_user securitykiss "secret" *<br>securitykiss vpn_user "scret" *</div></blockquote>with "ip link" there is no pppx, please help me?<br><br><br><br></div></body></html>