[Openswan Users] Setting leftsubnet stops xl2tpd from working

Willie Gillespie wgillespie+openswan at es2eng.com
Mon Aug 9 17:32:56 EDT 2010


George Pollard wrote:
> Now my problem:
> 
> If I leave leftsubnet undefined (which I think means it defaults to
> left/32), then everything works as expected, but I cannot access
> anything in the subnet that I need to.
> However, if I define leftsubnet, suddenly xl2tpd doesn't work any more.
 >
> And this is what xl2tpd outputs when it fails:
> 
>         control_finish: Peer requested tunnel 45 twice, ignoring second one.
>         last message repeated 2 times
>         Maximum retries exceeded for tunnel 3352.  Closing.
>         control_finish: Peer requested tunnel 45 twice, ignoring second one.
>         Connection 45 closed to [....], port 1701 (Timeout)
>         Unable to deliver closing message for tunnel 3352. Destroying anyway.

I had a similar problem just a few months ago with xl2tpd not being 
encapsulated in the tunnel in some cases.  I just wish I could remember 
what I did.

My config files look about the same as yours except for I have 
rightprotoport=17/1701 -- I don't think I ever got %any to work 
(luckily, I didn't actually need to).

If you do a tcpdump, are your L2TP packets being encapsulated?  (when 
it's not working)

Willie


More information about the Users mailing list