[Openswan Users] xl2tpd fails to establish tunnel, received out of order packet on tunnel -1

[Will Roberts]

I tried making a connection to xl2tpd without going over an openswan 
tunnel and I still see the same issue. So it's pretty safe to say that 
my ipsec configuration isn't the (immediate) issue.

At this point I'd like to just get the machines connecting without 
bothering with the openswan part. Again is there any debug options I can 
enable to provide more output?

Regards,
--Will

On 05/19/2010 09:50 AM, Will Roberts wrote:
> My current config on all my servers looks like this:
>
> http://www.bws42.com/zztmp/ipsec.20100517.conf
>
> The clients are the reverse. Several of my servers have multiple IPs,
> but I haven't had an issue with that before, and since the openswan
> tunnel is established without any error I didn't think to look there for
> a problem.
>
> --Will
>
> On Wed, May 19, 2010 at 2:06 AM, Tuomo Soini <tis at foobar.fi
> <mailto:tis at foobar.fi>> wrote:
>
>     Will Roberts wrote:
>
>      > http://www.bws42.com/zztmp/xl2tpd.20100517.log
>      > http://www.bws42.com/zztmp/xl2tpd.20100517.conf
>
>     My guess is this isn't xl2tpd issue. Can you show your conn in ipsec
>     config file?
>
>     Make sure you use rightprotoport=17/%any
>
>     There is a known bug in openswan-2.6.x that remote protoport only works
>     for %any case.
>
>     --
>     Tuomo Soini <tis at foobar.fi <mailto:tis at foobar.fi>>
>     Foobar Linux services
>     +358 40 5240030
>     Foobar Oy <http://foobar.fi/>
>
>