[Openswan Users] Ipsec connection doesn't work over PPP

[Paul Wouters]

On Thu, 23 Nov 2006, Antony Gelberg wrote:

> >> If this is the server, it would need
> >> right=%any, not right=%defaultroute.
> >> You also need auto=add because you cannot initiate to %any, you need to
> >> wait
> >> for them to initiate to you.
> >>
> >> The logs show no problem, so it could be that ESP packets are being
> >> filtered.
> >> Try adding "forceencaps=yes" to roadwarrior-net. It will cause NAT-T to
> >> kick
> >> in and use ESPinUDP packets instead of ESP. Perhaps those are not
> >> filtered.
> >>
>
> Unfortunately this didn't help at all.
>
> Is there any other option than to ask Vodafone?  Is anybody using openswan
> over a Vodafone data link?

Try ikeping to see if your ISP is filtering. See man ipsec_ikeping

Paul