[Openswan Users] Setting leftsubnet stops xl2tpd from working

[Randy Wyatt]

What is the reason you want the leftsubnet?  It works just fine without it.

What is the problem you are trying to solve?

I have xl2tpd working just fine without a left/right subnet with multiple clients accessing everything on the server subnet.

Regards,
Randy

-----Original Message-----
From: porges at porg.es on behalf of George Pollard
Sent: Mon 8/9/2010 6:02 PM
To: Randy Wyatt
Cc: Willie Gillespie; users at openswan.org
Subject: Re: [Openswan Users] Setting leftsubnet stops xl2tpd from working
 
On 10 August 2010 12:44, Randy Wyatt <rwyatt at nvtl.com> wrote:
> Is this with leftsubnet/rightsubnet removed?

This is with leftsubnet specified, and connection failing.

Here is the log without leftsubnet specified, and connection success:

Running the logs through diff, the difference seems to be that the
client never gets to Start-Control-Connection-Connected in the
non-working version.

	setsockopt recvref[22]: Protocol not available
	This binary does not support kernel L2TP.
	xl2tpd version xl2tpd-1.2.5 started on MY_VPN PID:9758
	Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.
	Forked by Scott Balmos and David Stipp, (C) 2001
	Inherited by Jeff McAdams, (C) 2002
	Forked again by Xelerance (www.xelerance.com) (C) 2006
	Listening on IP address 0.0.0.0, port 1701
	network_thread: recv packet from MY_CLIENT_IP, size = 106, tunnel =
0, call = 0 ref=0 refhim=0
	get_call: allocating new tunnel for host MY_CLIENT_IP, port 1701.
	handle_avps: handling avp's for tunnel 51857, call 0
	message_type_avp: message type 1 (Start-Control-Connection-Request)
	protocol_version_avp: peer is using version 1, revision 0.
	framing_caps_avp: supported peer frames: sync
	bearer_caps_avp: supported peer bearers:
	firmware_rev_avp: peer reports firmware version 1537 (0x0601)
	hostname_avp: peer reports hostname 'MY_CLIENT'
	vendor_avp: peer reports vendor 'Microsoft'
	assigned_tunnel_avp: using peer's tunnel 6
	receive_window_size_avp: peer wants RWS of 8.  Will use flow control.
	control_finish: message type is Start-Control-Connection-Request(1).
Tunnel is 6, call is 0.
	control_finish: sending SCCRP
	network_thread: recv packet from MY_CLIENT_IP, size = 106, tunnel =
0, call = 0 ref=0 refhim=0
	get_call: allocating new tunnel for host MY_CLIENT_IP, port 1701.
	handle_avps: handling avp's for tunnel 58013, call 0
	message_type_avp: message type 1 (Start-Control-Connection-Request)
	protocol_version_avp: peer is using version 1, revision 0.
	framing_caps_avp: supported peer frames: sync
	bearer_caps_avp: supported peer bearers:
	firmware_rev_avp: peer reports firmware version 1537 (0x0601)
	hostname_avp: peer reports hostname 'MY_CLIENT'
	vendor_avp: peer reports vendor 'Microsoft'
	assigned_tunnel_avp: using peer's tunnel 6
	receive_window_size_avp: peer wants RWS of 8.  Will use flow control.
	control_finish: message type is Start-Control-Connection-Request(1).
Tunnel is 6, call is 0.
	control_finish: Peer requested tunnel 6 twice, ignoring second one.
	build_fdset: closing down tunnel 58013
	network_thread: recv packet from MY_CLIENT_IP, size = 20, tunnel =
51857, call = 0 ref=0 refhim=0
	handle_avps: handling avp's for tunnel 51857, call 0
	message_type_avp: message type 3 (Start-Control-Connection-Connected)
	control_finish: message type is
Start-Control-Connection-Connected(3).  Tunnel is 6, call is 0.
	Connection established to MY_CLIENT_IP, 1701.  Local: 51857, Remote:
6 (ref=0/0).  LNS session is 'default'
	network_thread: recv packet from MY_CLIENT_IP, size = 70, tunnel =
51857, call = 0 ref=0 refhim=0
	handle_avps: handling avp's for tunnel 51857, call 0
	message_type_avp: message type 10 (Incoming-Call-Request)
	message_type_avp: new incoming call
	assigned_call_avp: using peer's call 1
	call_serno_avp: serial number is 0
	bearer_type_avp: peer bears: analog
	result_code_avp: result code not appropriate for
Incoming-Call-Request.  Ignoring.
	control_finish: message type is Incoming-Call-Request(10).  Tunnel is
6, call is 0.
	control_finish: Sending ICRP
	network_thread: recv packet from MY_CLIENT_IP, size = 48, tunnel =
51857, call = 36820 ref=0 refhim=0
	handle_avps: handling avp's for tunnel 51857, call 36820
	message_type_avp: message type 12 (Incoming-Call-Connected)
	tx_speed_avp: transmit baud rate is 54000000
	frame_type_avp: peer uses:sync frames
	ignore_avp : Ignoring AVP
	control_finish: message type is Incoming-Call-Connected(12).  Tunnel
is 6, call is 1.
	start_pppd: I'm running:
	"/usr/sbin/pppd"
	"passive"
	"nodetach"
	"192.168.100.127:192.168.100.128"
	"refuse-pap"
	"auth"
	"require-chap"
	"name"
	"MY_VPNL2TP"
	"debug"
	"file"
	"/etc/ppp/options.l2tpd"
	"/dev/pts/2"
	Call established with MY_CLIENT_IP, Local: 36820, Remote: 1, Serial: 0

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20100809/736e430a/attachment.html