[Openswan Users] NEW - Openswan + l2tpd - Client can't connect

[Jacco de Leeuw]

Ranieri Oliveira wrote:

> conn L2TP-PSK-orgWIN2KXP
>        authby=secret

Again, you cannot use NAT with KLIPS and a preshared key!
Here are some suggestions:

- Don't change your current server setup, but have your XP client
   dial-up to the Internet machine through an analog modem. That
   will get rid of the NAT. (Of course, you will want to use your
   XP client's DSL line but for the sake of testing an analog line
   will do fine).

- Switch from a preshared key to certificates. See Nate Carlson's
   instructions at: http://www.natecarlson.com/linux/ipsec-l2tp.php

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl