[Openswan Users] Opwenswan and L2TP Problem !

[Jacco de Leeuw]

Stanislav Nedelchev wrote:

> we are using winXP SP2 as VPN client .
> where can be the problem ?

Your logfiles on the Linux side are probably more interesting
than packet traces, at this moment. Did you have a look at them?
You also did not mention what versions you are using.

> virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16

If you use NAT-T you need to exclude your internal subnet:
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:!192.168.0.0/24

> conn RoadWar
>         left= 213.91.208.250
>         leftnexthop= 213.91.208.249
>         authby=secret

I saw a mention of ipsec0. If you are using KLIPS you cannot
use NAT-T with a PSK (as far as I know).

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl