[Openswan Users] Failure in connecting Openswan/L2TPD server on linux from client offered by windows xp

lizhong lizhong at ncic.ac.cn
Fri Jul 7 19:17:59 CEST 2006


Hi,
    I am a beginner of Openswan.I tried to connect my openswan server on a machine running linux from another machine running windows XP, and the error message 31 was generated by windows. Could anyont tell me the reason? Thank you!

    This is my Ipsec.conf:

conn L2TP-TEST
        authby=secret
        pfs=no
        rekey=no
        keyingtries=3

        left=192.168.10.2
        right=%any
        rightprotoport=17/%any
        auto=add


    And this is my l2tpd.conf:
[global] ; Global parameters:
auth file = /etc/ppp/chap-secrets ;

[lns default]
ip range = 192.168.10.128-192.168.10.254
local ip = 192.168.10.3
require chap = yes
refuse pap = yes
require authentication = yes
name = LinuxVPNserver
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd
length bit = yes

    The infomation in /var/log/secure :

Jul  7 18:42:15 gcnode028 pluto[27957]: packet from 10.10.21.159:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Jul  7 18:42:15 gcnode028 pluto[27957]: packet from 10.10.21.159:500: ignoring Vendor ID payload [FRAGMENTATION]
Jul  7 18:42:15 gcnode028 pluto[27957]: packet from 10.10.21.159:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port floating is off
Jul  7 18:42:15 gcnode028 pluto[27957]: packet from 10.10.21.159:500: ignoring Vendor ID payload [Vid-Initial-Contact]
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: responding to Main Mode from unknown peer 10.10.21.159
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: STATE_MAIN_R1: sent MR1, expecting MI2
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: STATE_MAIN_R2: sent MR2, expecting MI3
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: Main mode peer ID is ID_IPV4_ADDR: '10.10.21.159'
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: I did not send a certificate because I do not have one.
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: responding to Quick Mode {msgid:9beeb0e3}
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: up-host output: Cannot open "/proc/sys/net/ipv4/route/flush"
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: route-host output: Cannot open "/proc/sys/net/ipv4/route/flush"
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Jul  7 18:42:15 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: STATE_QUICK_R2: IPsec SA established {ESP=>0x5c0d0845 <0x1f888d36 xfrm=3DES_0-HMAC_MD5 NATD=none DPD=none}
Jul  7 18:42:18 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: received Delete SA(0x5c0d0845) payload: deleting IPSEC State #63
Jul  7 18:42:19 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #63: unroute-host output: Cannot open "/proc/sys/net/ipv4/route/flush"
Jul  7 18:42:19 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: received and ignored informational message
Jul  7 18:42:19 gcnode028 pluto[27957]: "L2TP-TEST"[14] 10.10.21.159 #62: received Delete SA payload: deleting ISAKMP State #62
Jul  7 18:42:19 gcnode028 pluto[27957]: packet from 10.10.21.159:500: received and ignored informational message
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20060707/1d4cdedd/attachment.htm


More information about the Users mailing list