[Openswan Users] Need your help related to l2tpd-openswan

[Jacco de Leeuw]

Utkarsh Shah wrote:

> 1. When L2TP server is behind NAT box, it doesn't work.

http://www.jacco2.dds.nl/networking/openswan-l2tp.html#serverNATed

Or do you mean you are forwarding L2TP from the Openswan server to
some other L2TP server located behind it?

> 2. MS-CHAP or CHAP protocol support, in case of external authentication.
>     i.e. we have radius server to authenticate user. if user selects 
> chap or ms-chap at l2tp client, password will be passed encrypted.
>     and we are not be able pass decrypted password and at external 
> server we need plain password.

What is your question exactly?

The lack of encryption in PAP should not be much of a problem. It is
encrypted within IPsec anyway.

> Please guide me to achieve above requirement. Will xl2tp will help ??

xl2tpd is an updated version but I think it will work the same as l2tpd
in this respect.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl