[Openswan Users] xl2tpd not responding - why?

Willie Gillespie wgillespie+openswan at es2eng.com
Tue Sep 7 19:18:55 EDT 2010


Paul Wouters wrote:
> On Tue, 7 Sep 2010, Willie Gillespie wrote:
> 
>> I use NETKEY and also that "ipsec saref" line in xl2tpd and have no 
>> problems
> 
> You're lucky then :) It's undefined. Probably because the support is
> missing, xl2tpd is disabling it for you.
> 
>> with it.  I'm just using the default kernel with Ubuntu 10.04.1 LTS -- 
>> so I'm not sure if they have compiled in the patch or not.
> 
> The patch is klips only, so it could only work if you had the kmod-openswan
> installed as well.
> 
> Paul

Paul,

You seem to be right that it is being disabled.  I see these messages on 
xl2tpd startup:

: Enabling IPsec SAref processing for L2TP transport mode SAs
: IPsec SAref does not work with L2TP kernel mode yet, enabling 
forceuserspace=yes
: setsockopt recvref[22]: Protocol not available
: This binary does not support kernel L2TP

I guess I'll remove it from my configuration.

Willie


More information about the Users mailing list