[Openswan Users] Xl2tpd - Openswan possible routing issue

[Paul Wouters]

On Thu, 18 Sep 2008, Janantha Marasinghe wrote:

> STATE_QUICK_R2: IPsec SA established {ESP=>0x8832df54 <0xbf845b89
> xfrm=3DES_0-HMAC_MD5 NATD=none DPD=none}
> Sep 18 09:08:11 vpnserv1 pluto[23435]: "L2TP-PSK"[1] vpn-client-public-ip #1:
> received Delete SA(0x8832df54) payload: deleting IPSEC State #2

Windows is hanging up. Your problem is not ipsec but l2tp/ppp related.

> Sep 18 08:38:28 vpnserv1 xl2tpd[2255]: death_handler: Fatal signal 15 received
> Sep 18 08:38:28 vpnserv1 xl2tpd[23525]: setsockopt recvref: Protocol not
> available

did you enable ipsec saref? You prob need to disable that.

> Sep 18 09:07:48 vpnserv1 xl2tpd[23526]: Maximum retries exceeded for tunnel
> 7508.  Closing.
> Sep 18 09:07:48 vpnserv1 xl2tpd[23526]: Connection 1 closed to
> vpn-client-pub-ip, port 1701 (Timeout)
> Sep 18 09:08:03 vpnserv1 xl2tpd[23526]: Maximum retries exceeded for tunnel
> 17567.  Closing.
> Sep 18 09:08:03 vpnserv1 xl2tpd[23526]: Connection 1 closed to
> vpn-client-pub-ip, port 1701 (Timeout)

check your firewall rules. Check external mtu and make sure it is around 1472 or so.

Paul