[Openswan Users] Problem with OpenSwan and windows mobile 6.0

Paul Wouters paul at xelerance.com
Tue Feb 19 06:00:30 EST 2008


On Tue, 19 Feb 2008, Denis Beltramo wrote:

> This is all that i could say, windows mobile say only that is impossibile to
> connect to network:

[cut tcpdump, which is not useful because there is encryption]

>         compress=yes

Try compress=no?

> conn roadwarrior-l2tp
>         leftprotoport=17/1701
>         rightprotoport=17/1701

Use rightprotoport=17/0 (meaning any port) but make sure you are using
2.4.11 or newer.
Add type=transport and rightsubnet=vhost:%priv,%no

>         also=roadwarrior
>
> conn roadwarrior
>         left=172.31.1.190
>         leftcert=pubblica.pem
>         right=%any
>         auto=add
>         pfs=no
>
> conn roadwarrior-all
>         leftsubnet=0.0.0.0/0
>         also=roadwarrior

You should decide what you are doing. IPsec tunnel mode, or
IPsec with L2TP. Then only have that connection active, so
there is no chance of the wrong one being picked.

> conn roadwarrior-l2tp-updatedwin
>         leftprotoport=17/1701
>         rightprotoport=17/1701
>         also=roadwarrior

Remove this one.

Paul


More information about the Users mailing list