[Openswan Users]

[Jacco de Leeuw]

Beat Zahnd wrote:

> I tried to secure a wireless LAN with a VPN. I use Debian sarge which 
> provides Openswan Version 2.2.0 X.509-1.5.4. I have to support Mac OS X 
> Panther which supports L2TP over IPSec using shared secrets.

I used such a setup exactly one hour ago. So it should work.

> conn wireless_vpn
>     authby=secret
>     pfs=no
>     #
>     left=192.168.1.13
>     leftsubnet=0.0.0.0/0

Remove this leftsubnet line. It is the L2TP daemon that provides the
connectivity to your internal network at 192.168.0.x.

>     leftprotoport=udp/l2tp
>     #
>     right=%any
>     rightprotoport=udp/%any
>     #
>     auto=add
>
> I seems that the rightprotoport=udp/%any is the problem.

Nope.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl