<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.2.2">
</HEAD>
<BODY>
Help, <BR>
I'm trying to open an l2tp connection and it doesn't connect. I'm lost as to why this is failing so badly - any help anyone can provide?<BR>
<BR>
xl2tpd -D <BR>
<BR>
[<A HREF="mailto:root@vpn02">root@</A> ~]# xl2tpd -D<BR>
xl2tpd[11273]: setsockopt recvref[30]: Protocol not available<BR>
xl2tpd[11273]: This binary does not support kernel L2TP.<BR>
xl2tpd[11273]: xl2tpd version xl2tpd-1.3.1 started on vpn02 PID:11273<BR>
xl2tpd[11273]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.<BR>
xl2tpd[11273]: Forked by Scott Balmos and David Stipp, (C) 2001<BR>
xl2tpd[11273]: Inherited by Jeff McAdams, (C) 2002<BR>
xl2tpd[11273]: Forked again by Xelerance (<A HREF="http://www.xelerance.com">www.xelerance.com</A>) (C) 2006<BR>
xl2tpd[11273]: Listening on IP address 64.211.xxx.xxx, port 1701<BR>
<BR>
secure.log<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: received Vendor ID payload [RFC 3947] method set to=109 <BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110 <BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110<BR>
Apr 1 15:11:20 l2tp pluto[2207]: packet from 64.211.xxx.rec:18935: received Vendor ID payload [Dead Peer Detection]<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: responding to Main Mode from unknown peer 64.211.xxx.rec<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: STATE_MAIN_R1: sent MR1, expecting MI2<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): peer is NATed<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: STATE_MAIN_R2: sent MR2, expecting MI3<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: Main mode peer ID is ID_IPV4_ADDR: '10.69.18.91'<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[13] 64.211.xxx.rec #13: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: deleting connection "L2TP-PSK-NAT" instance with peer 64.211.xxx.rec {isakmp=#0/ipsec=#0}<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: new NAT mapping for #13, was 64.211.xxx.rec:18935, now 64.211.xxx.rec:64113<BR>
Apr 1 15:11:20 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: the peer proposed: 64.211.xxx.xxx/32:17/1701 -> 10.69.18.91/32:17/0<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: responding to Quick Mode proposal {msgid:c8030e82}<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: us: 64.211.xxx.xxx<64.211.xxx.xxx>[+S=C]:17/1701<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: them: 64.211.xxx.rec[10.69.18.91,+S=C]:17/58382===10.69.18.91/32<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<BR>
Apr 1 15:11:21 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #14: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x0145a385 <0x958cc9d9 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=64.211.xxx.rec:64113 DPD=none}<BR>
Apr 1 15:11:41 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: received Delete SA(0x0145a385) payload: deleting IPSEC State #14<BR>
Apr 1 15:11:41 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: received and ignored informational message<BR>
Apr 1 15:11:41 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec #13: received Delete SA payload: deleting ISAKMP State #13<BR>
Apr 1 15:11:41 l2tp pluto[2207]: "L2TP-PSK-NAT"[14] 64.211.xxx.rec: deleting connection "L2TP-PSK-NAT" instance with peer 64.211.xxx.rec {isakmp=#0/ipsec=#0}<BR>
Apr 1 15:11:41 l2tp pluto[2207]: packet from 64.211.xxx.rec:64113: received and ignored informational message<BR>
<BR>
<BR>
<BR>
ppp.log<BR>
Mon Apr 1 15:40:18 2013 : L2TP connecting to server '64.211.xxx.xxx' (64.211.xxx.xxx)...<BR>
Mon Apr 1 15:40:18 2013 : IPSec connection started<BR>
Mon Apr 1 15:40:18 2013 : IPSec phase 1 client started<BR>
Mon Apr 1 15:40:18 2013 : IPSec phase 1 server replied<BR>
Mon Apr 1 15:40:19 2013 : IPSec phase 2 started<BR>
Mon Apr 1 15:40:19 2013 : IPSec phase 2 established<BR>
Mon Apr 1 15:40:19 2013 : IPSec connection established<BR>
Mon Apr 1 15:40:19 2013 : L2TP sent SCCRQ<BR>
Mon Apr 1 15:40:39 2013 : L2TP cannot connect to the server<BR>
<BR>
<BR>
ipsec.conf<BR>
<BR>
version 2.0 # conforms to second version of ipsec.conf specification<BR>
<BR>
config setup<BR>
dumpdir=/var/run/pluto/<BR>
#in what directory should things started by setup (notably the Pluto daemon) be allowed to dump core?<BR>
nat_traversal=yes<BR>
#whether to accept/offer to support NAT (NAPT, also known as "IP Masqurade") workaround for IPsec<BR>
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12<BR>
#contains the networks that are allowed as subnet= for the remote client. In other words, the address<BR>
#ranges that may live behind a NAT router through which a client connects.<BR>
protostack=netkey<BR>
#decide which protocol stack is going to be used.<BR>
oe=off<BR>
#Disable Opertunistic Encryption.<BR>
<BR>
conn L2TP-PSK-NAT<BR>
rightsubnet=vhost:%priv<BR>
also=L2TP-PSK-noNAT<BR>
<BR>
conn L2TP-PSK-noNAT<BR>
authby=secret<BR>
#shared secret. Use rsasig for certificates.<BR>
pfs=no<BR>
#Disable pfs<BR>
auto=add<BR>
#start at boot<BR>
keyingtries=8<BR>
#Only negotiate a conn. 3 times.<BR>
ikelifetime=8h<BR>
keylife=1h<BR>
type=transport<BR>
#because we use l2tp as tunnel protocol<BR>
left=64.211.xxx.xxx<BR>
#fill in server IP above<BR>
leftprotoport=17/1701<BR>
right=%any<BR>
rightprotoport=17/%any<BR>
<BR>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
-- <BR>
_______________________<BR>
Steven Lokie<BR>
iMemories<BR>
Steven.Lokie@iMemories.com <BR>
<BR>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>