[Openswan Users] Trouble with IPSEC/xl2tpd and multiple connections

Paul Wouters paul at xelerance.com
Mon Feb 19 17:24:36 EST 2007


On Mon, 19 Feb 2007, The Adept wrote:

> > > >   I've recently set up an openswan/l2tpd VPN using certificates.
> > > > Everything appears to work quite well except when multiple clients
> > > > attempt to connect simultaneously.  A single client can stay on forever
> > > > if another doesn't connect.  Once a second client attempts to connect,
> > > > both clients start renegotiating continually.   If logs would help I can
> > > > provide them in another email, I'm hoping I have something simple wrong
> > > > that I've overlooked.

> And to be extra clear, I've tested with 2 clients not behind NAT and the same
> behavior happens.

In that case, I'm interested to see the openswan logs (without plutodebug= or
klipsdebug), and the xl2tpd logs (please recompile with the debug flags
specified as illustrated in the Makefile).

Which versions of xl2tpd and openswan are you using? Can you try openswan
2.4.x CVS and xl2tpd GIT?

I will release xl2tpd 1.1.07 today, but I can't release openswan-2.4.8 yet
without fixing the 2.6.19/2.6.20 crashers, so for that you should probably
try the CVS version.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155


More information about the Users mailing list