[Openswan Users] intel Macs

[Jacco de Leeuw]

Paul Wouters wrote:

>>Hi again. Another Mac issues. With my working roadwarrior setup ppc Macs and
>>windows connect fine. However the new intel mac can not connect it tries to
>>pull my xp-conn.
>>
>>My ppc mac pulls this connection.
> 
> I do not understand "pull" here.

Me neither :-)

>>conn roadwarrior-osx
>>       leftprotoport=17/1701
>>       rightprotoport=17/%any

Has something changed in Openswan 2.4.5 (or perhaps earlier)?
Because rightprotoport=17/%any used to work for both Windows and
Mac clients, but now the L2TP packets don't seem to arrive at the
Windows client. Changing this to rightprotoport=17/1701 does work
for Windows clients, but Mac clients can't connect because they
use floating ports.

>>conn roadwarrior-xp
>>       leftprotoport=17/1701
>>       rightprotoport=17/1701
> 
> If this is the server, i would phase out one of those connections. Just
> don't support non-updated XP machines with 1701, or just allow them all
> using %any, but don't do both connections.

No, you're confusing this with leftprotoport=17/0. That's what those
non-updated Windows clients use.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl