[Openswan Users] xl2tpd fails to establish tunnel, received out of order packet on tunnel -1

[Paul Wouters]

On Fri, 21 May 2010, Will Roberts wrote:

> Thanks, I must have only looked at the man page for xl2tpd. Those options 
> were enough to identify that my client wasn't receiving responses from the 
> server.
>
> My xl2tpd server was set to listen on 0.0.0.0, which in my case included 3 
> public IPs. The default route out of the server is via IP #1, and the 
> openswan/xl2tpd traffic is directed to IP #2. Given that configuration, my 
> client never received any responses to its tunnel requests and therefore sent 
> a Timeout packet to the server which resulted in the "received out of order 
> packet on tunnel -1" error message.
>
> When I forced xl2tpd to only listen on IP #2 then everything started working. 
> The exchange below was captured with tcpdump on the server. Shouldn't the 
> reply packet be sent from the same IP regardless?

Yes, we have a fix for this that will be in the next release.

Paul