[Openswan Users] Unauthorized remote IP address

Jax cybercorecentre at gmail.com
Tue Mar 27 07:05:20 EDT 2007


Paul Wouters wrote:
> On Mon, 26 Mar 2007, Jax wrote:
>
>   
>>>>>> pppd[27766]: local  IP address 10.0.0.1
>>>>>> pppd[27766]: remote IP address 10.20.30.1
>>>>>> pppd[27766]: Script /etc/ppp/ip-up started (pid 5314)
>>>>>> pppd[27766]: rcvd [IPCP TermReq id=0x2 "Unauthorized remote IP
>>>>>> address"]
>>>>>>             
>>>> Ok I forget to tell you that the machine has a 10.0.0.1 lan address.
>>>> The 10.20.30.1 is the other side (vpn server). As I told you before I
>>>> use this box for _client_ which connects to an external server.
>>>>         
>>> Sorry, are you saying that the above comes from the server log?
>>> The server is running Linux/Openswan too? Then we'd have to take
>>> a look at the server's l2tpd.conf and chap-secrets.
>>>
>>>       
>> I don't know what is running on the server and I don't have any kind of
>> access to that server. I guess the solution is to force pppd for not use
>> the local ip 10.0.0.1 rather a 10.20.30.2.
>>     
>>> Jacco
>>>       
>> Jax
>>     
>
> no. the solution is to NOT specify an IP and let the server give you one,
> eg use:
>
> ipcp-accept-local
> ipcp-accept-remote
>
>   
I pasted all of my config files before, including options.l2tp client 
and these options are in, although I tried to comment them out does not 
help.

I guess the remote server is l2tpd too:
l2tpd[19369]: vendor_avp: peer reports vendor 'l2tpd.org'

> See the example configs in openswan-2/testing/pluto/l2tp-01 (on openswan 2.5.x or higher,
> 2.4.x doesnt not have that testcase)
>
> Paul
>   

Jax


More information about the Users mailing list