{Spam?} =?gb2312?B?UmU6IFtPcGVuc3dhbiBVc2Vyc10gIklTQUtNUCBTQSBlc3RhYmxpc2g=?= =?gb2312?B?ZWQiIEJVVCAic3RhdGUgdHJhbnNpdGlvbiBmdW5jdGlvbiBmb3IgU1Q=?= =?gb2312?B?QVRFX1FVSUNLX1IwIGZhaWxlZCI=?=

[=?gb2312?B?d2p0X2VyaWM=?=]

The leftsubnet may cause the error,I delete this line and IPsec SA
establish successfully

now my conn looks like this

conn L2TP-PSK
#use a preshared key
#disable PFS for windows client
authby=secret
pfs=no
#
#left means local
left=192.168.10.152
leftprotoport=17/0
#
#remote user: %any for dyn ip
right=%any
rightprotoport=17/1701
#
auto=add

the nat-t must be enabled or the ISAKMP SA won't established.

thank you Jacco : )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20050713/1a65a55f/attachment.htm