[Openswan Users] openswan 2.4.14 + xl2tpd

Reza ISSANY issanyr at olympecti.fr
Wed Apr 22 05:10:23 EDT 2009


Hi, 

Sorry for my bad english. 

Few weeks ago, I had a problem with the last openswan (2.6.21) and xl2tpd. 
Someone told me that this version has a bug with nat-t and advice me to use the 2.4.14 of openswan version. 

Bug at http://bugs.xelerance.com/view.php?id=1004 

I have just setup the 2.4.14, and I'm trying to use it with netkey, but it doesn't work. 

I'm trying with a Windows Vista and I have this log : 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: responding to Quick Mode {msgid:04000000} 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #11: STATE_QUICK_R2: IPsec SA established {ESP=>0xfe146102 <0xb12972e0 xfrm=AES_128-HMAC_SHA1 NATD=82.229.55.165:4500 DPD=none} 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #7: received Delete SA(0x76e0a5b3) payload: deleting IPSEC State #10 
Apr 22 10:58:16 integration pluto[9189]: "roadwarrior"[8] 82.229.55.165 #7: received and ignored informational message 

I can see that the tunnel is established, but nothing is logged by xl2tpd. 

How should I do to get working this ? 

Thanks for your helps. 

# Add connections here 
conn %default 
keyingtries=1 
compress=yes 
disablearrivalcheck=no 
authby=rsasig 
leftrsasigkey=%cert 
rightrsasigkey=%cert 

# sample VPN connections, see /etc/ipsec.d/examples/ 

conn roadwarrior 
pfs=no 
type=transport 
auto=add 
leftcert=vpn.olympecti.fr.pem 
left=192.168.1.116 
leftnexthop=192.168.1.1 
leftprotoport=17/%any 
right=%any 
rightprotoport=17/%any 


--- azer 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20090422/e5f83db4/attachment.html 


More information about the Users mailing list