[Openswan Users] WinXP Roadwarrior cannot connect to xl2tpd
paul at xelerance.com
Wed Nov 8 11:09:01 EST 2006
On Tue, 7 Nov 2006, Jacco de Leeuw wrote:
> > I am trying to connect my Home workstation(WinXP for testing,
> > NATed behind my openswan gateway) to the network at
> > work using openswan(netkey), xl2tpd 1.04 and certificates.
> > conn khdn-rw
> > right=%any
> > rightsubnet=vhost:%priv,%no
> > rightprotoport=17/%any
> Could you try with rightprotoport=17/1701? For some reason the
> combination of the three lines above results in L2TP packets
> being sent in the clear (Paul?).
I think it is the leftnexthop=gatewayip that is causing this connection
to fail, and i do think it is because of the 17/%any. There is an
outstanding bug report on this.
> Unfortunately this change means that MacOS X clients are excluded.
> Do you use Macs?
> > dpddelay=60
> > dpdtimeout=240
> > dpdaction=clear
> By the way, this won't work with Windows and Mac clients because
> they don't support Dead Peer Detection. It will be ignored but if
> you also have Linux L2TP/IPsec clients it could be of use.
Building and integrating Virtual Private Networks with Openswan:
More information about the Users