[Openswan Users] Tunnel but no l2tp connection with openswan-2.6.19 and xltpd-1.2.3

No Body is Perfect news.listener at gmail.com
Wed Dec 17 09:29:02 EST 2008


Hello Comunnity !
I updated our VPN server from Fedora FC6 (Kernel
2.6.22/openswan-2.4.5/xl2tpd-1.1.11) to Fedora 10 (Kernel
2.6.27/openswan-2.6.19/xl2tpd-1.2.3) successfully  but ...
now the WinXP Clients can't connect to my network.
Tunnel work but no connection to xl2tp.

ipsec auto --status say ...

000 "roadwarrior-all"[3]: 0.0.0.0/0===217.110.71.112[C=DE, ST=BW, L=ST,
O=Company, OU=EDV, CN=server]...95.112.243.191[C=DE, ST=BW, L=ST,
O=Company, OU=EDV, CN=mycn]===?; unrouted; eroute owner: #0
000 "roadwarrior-l2tp"[2]: 217.110.71.112[C=DE, ST=BW, L=ST, O=Company,
OU=EDV, CN=server]:17/1701---217.110.71.111...95.112.243.191[C=DE,
ST=BW, L=ST, O=Company, OU=EDV, CN=mycn]:17/1701; erouted; eroute owner: #45
000 #44: "roadwarrior-all"[3] 95.112.243.191:4500 STATE_MAIN_R3 (sent
MR3, ISAKMP SA established); EVENT_SA_REPLACE in 3304s; newest ISAKMP; nodpd
000 #45: "roadwarrior-l2tp"[2] 95.112.243.191:4500 STATE_QUICK_R2 (IPsec
SA established); EVENT_SA_REPLACE in 3304s; newest IPSEC; eroute owner
000 #45: "roadwarrior-l2tp"[2] 95.112.243.191 esp.9cdcf1e at 95.112.243.191
esp.c3fd3fad at 217.110.71.112

and on /var/log/messages ...

Dec 14 11:04:29 linda xl2tpd[4912]: Maximum retries exceeded for tunnel
53196.  Closing.
Dec 14 11:04:29 linda xl2tpd[4912]: Connection 1 closed to
95.112.243.191, port 1701 (Timeout)
Dec 14 11:04:35 linda xl2tpd[4912]: Can not find tunnel 53196 (refhim=0)


now my ipsec.conf ..


config setup
   # klipsdebug=none
   # plutodebug="control parsing"
   uniqueids=no
   myid=@XXXXXXXXXX
   plutowait=yes
   nat_traversal=yes

virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!192.168.1.0/24
   #interfaces=%defaultroute
   oe=no
   protostack=netkey
   nhelpers=1

conn %default
   keyingtries=3
   authby=rsasig
   disablearrivalcheck=no
   left=%defaultroute
   leftrsasigkey=%cert
   rightrsasigkey=%cert

conn roadwarrior-net
    leftsubnet=172.30.10.0/24
    also=roadwarrior

conn roadwarrior-all
    leftsubnet=0.0.0.0/0
    also=roadwarrior

conn roadwarrior-l2tp
    pfs=no
    leftnexthop=217.110.71.111
    leftprotoport=17/1701
    rightprotoport=17/%any
    also=roadwarrior

conn roadwarrior
    left=%defaultroute
    leftcert=server-cert.pem
    right=%any
    rightsubnet=vhost:%no,%priv
    auto=add

and my xl2tpd.conf
[global]
port = 1701
debug tunnel = yes
debug avp = yes
debug network = yes
debug state = yes

[lns default]
exclusive=yes
ip range = 172.30.99.2-172.30.99.254
local ip = 172.30.99.1
require chap = yes
refuse pap = yes
require authentication = yes
refuse authentication = no
name =  LinuxVPNserver
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes

Any hints ?  Same config worked on older system ....
Thanks in advance




More information about the Users mailing list