[Openswan Users] Unable to connect to Openswan/L2TP from Sprint Wireless Broadband

Alan Whinery whinery at hawaii.edu
Tue Mar 4 11:59:06 EST 2008


Now you guys got me all interested, as I have been using Sprint EVDO,  
and have never had a problem. I will go look at logs.

Alan


On Mar 4, 2008, at 2:33 AM, Jacco de Leeuw <jacco2 at dds.nl> wrote:

> Paul Wouters wrote:
>
>> No, that means there IS filtering going on. Proto 50 filtering. with
>> forceencaps, you will be sending UDP 4500 packets instead of proto  
>> 50 (ESP)
>> packets.
>
> Roberto's tcpdump on the server did contain this packet:
>
> 15:54:10.973291 IP 68.29.218.126 > 66.93.22.254: ESP 
> (spi=0xb730f9c8,seq=0x31),
> length 116
>
> I know, tcpdumps on NETKEY are not reliable. A better idea is to sniff
> with another computer between the client and the server. Or to use  
> KLIPS.
>
> Another method would be to try a Windows client. If ESP is indeed  
> blocked,
> then it will not work with Windows either.
>
> However, if Sprint EVDO does not block ESP then it should have worked
> with his backup dialup account as well. But it did not.
>
> Jacco
> -- 
> Jacco de Leeuw                         mailto:jacco2 at dds.nl
> Zaandam, The Netherlands           http://www.jacco2.dds.nl
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155


More information about the Users mailing list