[Openswan Users] Unable to connect to Openswan/L2TP from Sprint Wireless Broadband

Paul Wouters paul at xelerance.com
Tue Mar 4 06:35:13 EST 2008


On Mon, 3 Mar 2008, Roberto C. Sánchez wrote:

> >   right=%any
> >   rightprotoport=17/%any
> >   rightsubnet=vhost:%priv,%no
> >
> That was it exactly.  In fact, the suggestion of adding forceencaps=yes
> to the configuration solved the problem immediately.  So, it looks like
> there is no evil filtering by Sprint going on.  Thanks so much for the
> assistance.

No, that means there IS filtering going on. Proto 50 filtering. with
forceencaps, you will be sending UDP 4500 packets instead of proto 50 (ESP)
packets.

Paul


More information about the Users mailing list