[Openswan Users] Openswan 2.6.21 L2TP/IPSEC

[Paul Wouters]

On Sat, 4 Jul 2009, Mehran Toreihi wrote:

> We are using CentOS-5.2 kernel 2.6.18. We are testing Road Warrior
> (L2TP/IPSEC).
> There is no nat and firewall. We are using PSK and l2tpd-0.66.

I recommend xl2tpd over l2tpd (its a fork/continuation of the same software)

> With the same configuration as the attachment files, When we use
> Openswan-2.4.8 everything is OK. It means the road warrior connects
> successfully and can ping LAN (and tcpdump shows ESP), but When we are
> using Openswan-2.6.21 the ISAKMP SA establishes but nothing happens after
> that.

It's a known bug: http://bugs.xelerance.com/issues/1004/

Stay with openswan 2.4.15 for now.

Paul