[Openswan Users] plain IPSEC -> L2TP

Wolfman BulletinCatcher at web.de
Mon Apr 5 02:28:14 CEST 2004


Hi,
I finally got a working IPSEC Connection using the IPSEC Toolst from Markus 
Müller.
Now I want to change it into some more comfortable thing, using L2TP, so I 
can use it like an "dial up" connection.
Whenever I trie to connect with the Network assistant, I get the following 
error:

Apr  5 00:54:04 Linuxserver pluto[17456]: "p2n"[2] 192.168.107.123 #1: 
transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Apr  5 00:54:04 Linuxserver pluto[17456]: "p2n"[2] 192.168.107.123 #1: sent 
MR3, ISAKMP SA established
Apr  5 00:54:04 Linuxserver pluto[17456]: "p2n"[2] 192.168.107.123 #1: 
cannot respond to IPsec SA request because no connection is known for 
80.137.27.201[<some certid>]:17/1701...192.168.107.123[<some certid>]:17/1701

since my plain IPSEC Connection works withoutthis error,  this is strange, 
because it should be nearly the same IPSec stuff before handing the 
connection over to the L2TP.
So does someone got an Idea what to do? Any hints how to solve this? I red 
nearly every HP about this, but I only get configurations for IPSec/L2TP 
with PSK or plain IPSec with Certificates. Since the Certificate solution 
is the only one working here, I need IPSec/L2TP with certificates.
Here my config:

config setup
         nat_traversal=yes
         interfaces=%defaultroute
         klipsdebug=none
         plutodebug=none
         uniqueids=yes

# Add connections here.

conn %default
         keyingtries=3
         compress=yes
         disablearrivalcheck=no
         authby=rsasig
         left=%defaultroute
         leftid="<some CertId>"
         leftcert=VPN-Gateway-Cert.pem
         leftrsasigkey=%cert
         rightrsasigkey=%cert
         pfs=no

conn n2n
         right=%any
         auto=add
         leftsubnet=192.168.107.1/255.255.255.0

conn p2n
         right=%any
         auto=add



More information about the Users mailing list