[Openswan Users] L2TP/IPsec with PSK on Debian

Jacco de Leeuw jacco2 at dds.nl
Tue Nov 29 22:23:16 CET 2005


Wojciech Sobczak wrote:

>>The IPsec part seems to be working, it is the L2TP part that
>>times out. 
> and that's all, that why i was thinking a ipsec part is broken

I think you are right, I had a closer look at your logs.  It could be
the fragmentation issue that has been discussed on the mailing list.
What if you add 'fragicmp=no'?

Or is there a firewall or buggy router that is blocking and/or mangling
packets? You could check with a seperate system in between the client
and the server doing some sniffing.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl
                     Mosquitos suck


More information about the Users mailing list