[Openswan Users] Re: OSX roadwarrior to openswan

[Chris Garrigues]

On May 22, 2006, at 4:55 PM, Jacco de Leeuw wrote:

>
> Chris Garrigues wrote:
>
>> May 22 10:55:50 fw last message repeated 6 times
>> May 22 10:55:50 fw l2tpd[6602]: Maximum retries exceeded for  
>> tunnel 12555.  Closing. May 22 10:55:50 fw l2tpd[6602]: Connection  
>> 3 closed to 192.12.3.191, port 49233 (Timeout)
>
> I looked at the packets that are exchanged and I noticed that the
> responses sent by the Linux box (SCCRP - Start Control Reply) are
> in the clear. The Mac ignores these, obviously, and retries.
> When I disconnect and reconnect, it works.
>
> Could it have anything to do with the rightprotoport=17/%any ?

I changed that to rightprotoport=17/1701 and now it doesn't even  
bring up the ipsec layer.