<div dir="ltr">I have no idea what the server is or does.<div><br></div><div>How can I enable more explicit debugging info? I need to be able to tell the people that are administering this VPN server what to do.</div></div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jan 23, 2014 at 9:49 AM, Kevin Keane Subscription <span dir="ltr"><<a href="mailto:subscription@kkeane.com" target="_blank">subscription@kkeane.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div>
<font face="tahoma">What are you using as client software? It may not be your server; I have a similar problem and suspect Windows 8.1. It used to work, and about two months ago stopped. I suspect some Windows update; I'm also having problems with my Windows 7 client.<br>
<br>Unlike you, my IPSec/L2TP server is not running Openswan (I'm actually using Fortigate). The connection collapses faster than it does for you, only a few seconds, but during that time I verified traffic is flowing.<br>
<br>Openswan and xl2tpd as a client works without a problem, just as your OSX Macs.<br><br></font><font face="tahoma">Sorry I can't offer a solution, but hopefully this additional info will help narrow down the problem.<br>
<br></font><p>Kevin Keane</p><p>The NetTech</p><p><a href="tel:760-721-8339" value="+17607218339" target="_blank">760-721-8339</a></p><p><a href="http://www.4nettech.com" target="_blank">http://www.4nettech.com</a></p><p>
Our values: Privacy, Liberty, Justice</p><p>See <a href="https://www.4nettech.com/corp/the-nettech-values.html" target="_blank">https://www.4nettech.com/corp/the-nettech-values.html</a></p><div><div class="h5"><p><br></p>
<blockquote style="border-left:2px solid #325fba;padding-left:5px;margin-left:5px;margin-right:0px">-----Original message-----<br><strong>From:</strong> Alexandru Nedelcu <<a href="mailto:alex@bionicspirit.com" target="_blank">alex@bionicspirit.com</a>><br>
<strong>Sent:</strong> Wednesday 22nd January 2014 6:15<br><strong>To:</strong> <a href="mailto:users@lists.openswan.org" target="_blank">users@lists.openswan.org</a><br><strong>Subject:</strong> [Openswan Users] VPN Connection failing after 1-2 minutes<br>
<br>
<div dir="ltr"><div><p style="margin:1.2em 0px!important">Hi folks,</p>
<p style="margin:1.2em 0px!important">I’m trying to connect to an L2TP/IPSec VPN and the connection drops after 1-2 minutes of being connected. During those 1-2 minutes, the connection does work. My colleagues that use OS X laptops don’t have problems. I’ve ran out of ideas and thought to ask on this mailing list. </p>
<p style="margin:1.2em 0px!important">Here’s the software that I use:</p>
<ul style="margin:1.2em 0px;padding-left:2em">
<li style="margin:0.5em 0px">Ubuntu 12.04</li>
<li style="margin:0.5em 0px">openswan 2.6.37</li>
<li style="margin:0.5em 0px">xl2tpd 1.3.1</li>
<li style="margin:0.5em 0px">l2tp-ipsec-vpn 1.0.9</li>
</ul>
<p style="margin:1.2em 0px!important">The weird thing is that I'm not seeing a clear error in the logs. It just stops. I activated debugging logs in syslog and here’s what I’m getting:</p>
<pre style="font-size:0.85em;font-family:Consolas,Inconsolata,Courier,monospace;font-size:1em;line-height:1.2em;margin:1.2em 0px"><code style="font-size:0.85em;font-family:Consolas,Inconsolata,Courier,monospace;margin:0px 0.15em;padding:0px 0.3em;white-space:pre-wrap;border:1px solid rgb(234,234,234);background-color:rgb(248,248,248);border-top-left-radius:3px;border-top-right-radius:3px;border-bottom-right-radius:3px;border-bottom-left-radius:3px;display:inline;white-space:pre-wrap;overflow:auto;border-top-left-radius:3px;border-top-right-radius:3px;border-bottom-right-radius:3px;border-bottom-left-radius:3px;border:1px solid rgb(204,204,204);padding:0.5em 0.7em;display:block!important;display:block;padding:0.5em;color:rgb(51,51,51);background-color:rgb(248,248,255);background-repeat:initial initial">Jan 22 16:01:50 xl2tpd[10717]: last message repeated 3 times
Jan 22 16:01:50 frecmenta xl2tpd[10717]: network_thread: recv packet from 80.149.159.132, size = 20, tunnel = 57583, call = 0 ref=0 refhim=0
Jan 22 16:01:50 frecmenta xl2tpd[10717]: handle_avps: handling avp's for tunnel 57583, call 0
Jan 22 16:01:50 frecmenta xl2tpd[10717]: message_type_avp: message type 6 (Hello)
Jan 22 16:01:50 frecmenta xl2tpd[10717]: control_finish: message type is Hello(6). Tunnel is 10488, call is 0.
Jan 22 16:01:55 frecmenta xl2tpd[10717]: network_thread: recv packet from 80.149.159.132, size = 20, tunnel = 57583, call = 40673 ref=0 refhim=0
Jan 22 16:01:55 frecmenta pppd[10777]: rcvd [LCP EchoReq id=0x1 magic=0xa22708b6]
Jan 22 16:01:55 frecmenta pppd[10777]: sent [LCP EchoRep id=0x1 magic=0x82a8e6b4]
Jan 22 16:02:13 frecmenta xl2tpd[10717]: network_thread: recv packet from 80.149.159.132, size = 20, tunnel = 57583, call = 40673 ref=0 refhim=0
Jan 22 16:02:13 frecmenta pppd[10777]: rcvd [LCP EchoReq id=0x2 magic=0xa22708b6]
Jan 22 16:02:13 frecmenta pppd[10777]: sent [LCP EchoRep id=0x2 magic=0x82a8e6b4]
Jan 22 16:02:19 frecmenta xl2tpd[10717]: network_thread: select timeout
Jan 22 16:02:19 frecmenta xl2tpd[10717]: network_thread: recv packet from 80.149.159.132, size = 12, tunnel = 57583, call = 0 ref=0 refhim=0
Jan 22 16:02:20 frecmenta xl2tpd[10717]: network_thread: select timeout
Jan 22 16:02:20 frecmenta xl2tpd[10717]: network_thread: recv packet from 80.149.159.132, size = 20, tunnel = 57583, call = 0 ref=0 refhim=0
Jan 22 16:02:20 frecmenta xl2tpd[10717]: handle_avps: handling avp's for tunnel 57583, call 0
Jan 22 16:02:20 frecmenta xl2tpd[10717]: message_type_avp: message type 6 (Hello)
Jan 22 16:02:20 frecmenta xl2tpd[10717]: control_finish: message type is Hello(6). Tunnel is 10488, call is 0.
Jan 22 16:02:31 frecmenta xl2tpd[10717]: network_thread: recv packet from 80.149.159.132, size = 20, tunnel = 57583, call = 40673 ref=0 refhim=0
Jan 22 16:02:31 frecmenta pppd[10777]: rcvd [LCP EchoReq id=0x3 magic=0xa22708b6]
Jan 22 16:02:31 frecmenta pppd[10777]: sent [LCP EchoRep id=0x3 magic=0x82a8e6b4]
# <-- connection drops here
Jan 22 16:02:34 frecmenta L2tpIPsecVpnControlDaemon: Opening client connection
Jan 22 16:02:34 frecmenta L2tpIPsecVpnControlDaemon: Executing command service xl2tpd stop
Jan 22 16:02:34 frecmenta xl2tpd[10717]: network_thread: select returned error 4 (Interrupted system call)
Jan 22 16:02:34 frecmenta xl2tpd[10717]: death_handler: Fatal signal 15 received
Jan 22 16:02:34 frecmenta pppd[10777]: Hangup (SIGHUP)
Jan 22 16:02:34 frecmenta pppd[10777]: Modem hangup
Jan 22 16:02:34 frecmenta L2tpIPsecVpnControlDaemon: Command service xl2tpd stop finished with exit code 0
Jan 22 16:02:34 frecmenta pppd[10777]: Connect time 1.3 minutes.
Jan 22 16:02:34 frecmenta pppd[10777]: Sent 8172 bytes, received 28 bytes.
Jan 22 16:02:34 frecmenta pppd[10777]: Script /etc/ppp/ip-down started (pid 10856)
Jan 22 16:02:34 frecmenta pppd[10777]: Connection terminated.
Jan 22 16:02:34 frecmenta avahi-daemon[613]: Withdrawing workstation service for ppp0.
Jan 22 16:02:34 frecmenta NetworkManager[1079]: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jan 22 16:02:35 frecmenta pppd[10777]: Script /etc/ppp/ip-down finished (pid 10856), status = 0x0
Jan 22 16:02:35 frecmenta pppd[10777]: Exit.
Jan 22 16:02:35 frecmenta L2tpIPsecVpnControlDaemon: Executing command ipsec setup stop
Jan 22 16:02:35 frecmenta ipsec_setup: Stopping Openswan IPsec...
Jan 22 16:02:36 frecmenta kernel: [ 5640.279150] NET: Unregistered protocol family 15
Jan 22 16:02:36 frecmenta ipsec_setup: ...Openswan IPsec stopped
Jan 22 16:02:36 frecmenta L2tpIPsecVpnControlDaemon: Command ipsec setup stop finished with exit code 0
Jan 22 16:02:36 frecmenta L2tpIPsecVpnControlDaemon: Closing client connection</code></pre>
</div><div><br></div><div>Any ideas?</div><div><br></div><div>Thanks,</div><div>
<br></div><div>-- <br>Alexandru Nedelcu<br><a href="http://www.bionicspirit.com" title="This external link will open in a new window" target="_blank">www.bionicspirit.com</a><br>
<br>PGP Public Key:<br><a href="https://bionicspirit.com/key.aexpk" title="This external link will open in a new window" target="_blank">https://bionicspirit.com/key.aexpk</a>
</div></div>
<pre>_______________________________________________<br>
<a href="mailto:Users@lists.openswan.org" target="_blank">Users@lists.openswan.org</a><br>
<a href="https://lists.openswan.org/mailman/listinfo/users" target="_blank">https://lists.openswan.org/mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
</pre>
</blockquote>
</div></div></div>
<br>_______________________________________________<br>
<a href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a><br>
<a href="https://lists.openswan.org/mailman/listinfo/users" target="_blank">https://lists.openswan.org/mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Alexandru Nedelcu<br><a href="http://www.bionicspirit.com" target="_blank">www.bionicspirit.com</a><br><br>PGP Public Key:<br><a href="https://bionicspirit.com/key.aexpk" target="_blank">https://bionicspirit.com/key.aexpk</a>
</div>