[Openswan Users] 2.6.29 (klips) Mac OS xl2tp broken

Sven Schiwek ml-openswan at svenux.de
Tue Nov 9 03:20:57 EST 2010


Hi,

I've upgraded Openswan to 2.6.29. Everything is working fine except the
VPN connection from Mac OS X. The ipsec tunnel is working but not the
xl2tpd part. Windows7 for example is working fine with this
configuration. Attached you'll find the syslog output of such Mac OS X
connection.

Thanks in advance for any help,
Sven


My config is:
- Openswan: 2.6.29
- xl2tpd: 1.2.6
- Kernel: 2.6.30.9


--- /etc/ipsec.conf ---
version 2.0

config setup
        protostack=klips
        oe=off
        virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16
        nat_traversal=yes
        plutowait=yes
        nhelpers=0
        klipsdebug=none
        plutodebug=none
        uniqueids=yes
        dumpdir=/tmp/

conn defaults
        type=tunnel
        left=PUBLICIP
        authby=secret
        compress=no
        esp=aes256-md5
        ikelifetime=86400s
        rekeymargin=863s
        keylife=86400s
        keyingtries=%forever
        pfs=no
        dpddelay=30
        dpdtimeout=120

conn XL2TP
        also=defaults
        leftprotoport=17/1701
        right=%any
        rightprotoport=17/%any
        rightsubnet=vhost:%priv,%no
        ike=aes256-md5-modp1536
        rekey=no
        forceencaps=yes
        dpdaction=clear
        auto=add


--- /etc/xl2tpd/xl2tpd.conf ---
[lns default]
ip range = 192.168.20.2-192.168.20.200
local ip = 192.168.20.1
require chap = yes
refuse pap = yes
require authentication = yes
name = LinuxVPNserver
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes
flow bit = yes


--- /etc/ppp/options.xl2tpd ---
ms-dns 192.168.20.1
asyncmap 0
auth
lock
hide-password
mru 1400
passive
mtu 1400
proxyarp
noipx
connect-delay 5000
nodefaultroute
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: MacOSXL2TPD.txt.txt
Url: http://lists.openswan.org/pipermail/users/attachments/20101109/665cac41/attachment.txt 


More information about the Users mailing list