<div dir="ltr">I think (I have not done it myself - just read about it) you need to change the <span style="font-family:arial,sans-serif;font-size:12.727272033691406px">protostack to use KLIPS.</span><div><span style="font-family:arial,sans-serif;font-size:12.727272033691406px"><br>
</span></div><div><span style="font-family:arial,sans-serif;font-size:12.727272033691406px">Cheers</span></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 24 August 2014 05:10, Dominic Wiersma <span dir="ltr"><<a href="mailto:d.wiersma@dwits.nl" target="_blank">d.wiersma@dwits.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Hello all,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I have set-up an IPsec with xl2tpd and all is running fine.<u></u><u></u></p>
<p class="MsoNormal">The only problem is when multiple users want to connect from
the same public IP address to the IPsec server they cannot connect to it, and
if they can, another user is disconnected instead.<u></u><u></u></p>
<p class="MsoNormal">Which parameters control whether users can or cannot connect
to an IPSec VPN server from the same public IP?<u></u><u></u></p>
<p class="MsoNormal">I have searched hours but I cannot seem to find the right
buttons to turn.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am running Ubuntu 14.04 LTS with kernel 3.13.0-34-generic<u></u><u></u></p>
<p class="MsoNormal"><span lang="NL">Linux Openswan U2.6.38/K3.13.0-34-generic
(netkey)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="NL">Version xl2tpd: xl2tpd-1.3.6<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="NL"><u></u> <u></u></span></p>
<p class="MsoNormal">Now this is my ipsec.conf<u></u><u></u></p>
<p class="MsoNormal">dumpdir=/var/run/pluto/<u></u><u></u></p>
<p class="MsoNormal">nat_traversal=yes<u></u><u></u></p>
<p class="MsoNormal">virtual_private=%v4:<a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a><u></u><u></u></p>
<p class="MsoNormal">protostack=netkey<u></u><u></u></p>
<p class="MsoNormal">force_keepalive=yes<u></u><u></u></p>
<p class="MsoNormal">keep_alive=60<u></u><u></u></p>
<p class="MsoNormal">conn L2TP-PSK-noNAT<u></u><u></u></p>
<p class="MsoNormal">authby=secret<u></u><u></u></p>
<p class="MsoNormal">pfs=no<u></u><u></u></p>
<p class="MsoNormal">auto=add<u></u><u></u></p>
<p class="MsoNormal">keyingtries=3<u></u><u></u></p>
<p class="MsoNormal">ikelifetime=8h<u></u><u></u></p>
<p class="MsoNormal">keylife=1h<u></u><u></u></p>
<p class="MsoNormal">ike=aes256-sha1,aes128-sha1,3des-sha1<u></u><u></u></p>
<p class="MsoNormal">phase2alg=aes256-sha1,aes128-sha1,3des-sha1<u></u><u></u></p>
<p class="MsoNormal">type=transport<u></u><u></u></p>
<p class="MsoNormal">left=x.x.x.x<u></u><u></u></p>
<p class="MsoNormal">leftprotoport=17/1701<u></u><u></u></p>
<p class="MsoNormal">right=%any<u></u><u></u></p>
<p class="MsoNormal">rightprotoport=17/%any<u></u><u></u></p>
<p class="MsoNormal">dpddelay=10<u></u><u></u></p>
<p class="MsoNormal">dpdtimeout=20<u></u><u></u></p>
<p class="MsoNormal">dpdaction=clear<u></u><u></u></p>
<p class="MsoNormal">compress=yes<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">My xl2tpd.conf<u></u><u></u></p>
<p class="MsoNormal"> [global]<u></u><u></u></p>
<p class="MsoNormal">ipsec saref = yes<u></u><u></u></p>
<p class="MsoNormal">saref refinfo = 30<u></u><u></u></p>
<p class="MsoNormal">;debug avp = yes<u></u><u></u></p>
<p class="MsoNormal">;debug network = yes<u></u><u></u></p>
<p class="MsoNormal">;debug state = yes<u></u><u></u></p>
<p class="MsoNormal">;debug tunnel = yes<u></u><u></u></p>
<p class="MsoNormal">[lns default]<u></u><u></u></p>
<p class="MsoNormal">exclusive = no<u></u><u></u></p>
<p class="MsoNormal">ip range = 10.10.10.2-10.10.10.100<u></u><u></u></p>
<p class="MsoNormal">local ip = 10.10.10.1<u></u><u></u></p>
<p class="MsoNormal">refuse pap = yes<u></u><u></u></p>
<p class="MsoNormal">require authentication = yes<u></u><u></u></p>
<p class="MsoNormal">ppp debug = yes<u></u><u></u></p>
<p class="MsoNormal">pppoptfile = /etc/ppp/options.xl2tpd<u></u><u></u></p>
<p class="MsoNormal">length bit = yes<u></u><u></u></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"> <br>
<span style="color:navy">Best regards, </span><br>
<br>
<span style="color:navy">Dominic </span><br>
<br>
<span style="color:navy">E: <a href="mailto:d.wiersma@dwits.nl" target="_blank">d.wiersma@dwits.nl</a><br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
<br>
<br>
<span style="font-size:12.0pt"><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>_______________________________________________<br>
<a href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a><br>
<a href="https://lists.openswan.org/mailman/listinfo/users" target="_blank">https://lists.openswan.org/mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
<br></blockquote></div><br></div>