[Openswan Users] Openswan 2.6.32 / xl2tpd not working with Windows XP

Jai Dhar jdhar at fps-tech.net
Thu Jan 6 22:54:23 EST 2011


Paul,

>
> Odd. because the logs you showed in the previous mail shows a successful
> negotiation WITH NAT set. Are you sure this XP is fully upgraded?
>

I'm guessing this line indicates a successful negotiation:
Jan  5 22:40:06 viammc pluto[31255]: "L2TP-PSK-NAT"[2] 192.168.1.1 #1:
STATE_MAIN_R3: sent MR3, ISAKMP SA established

So yes, in all 3 cases of iPad, XP using external IP and XP using
internal, this happens. But in the XP using external IP case, xl2tpd
-D shows nothing. This was what happened when I didn't have 4500 open
when testing against iPad... opening that up fixed it and I then saw
debug output from pppd.

Now, how do I check if XP is upgraded, and upgraded to what
specifically? System Properties shows Versions 2002, Service Pack 3.

>
> This is some bug that requires more attention, likely an openswan bug. But
> what you see is our workaround for this being triggered, so I was expecting
> this to work...

Can you answer this... for the XP using internal IP case, is the
traffic supposed to be encapsulated over UDP? I ran tcpdump on both
the server and laptop when using XP w/ external IP case, and didn't
see any attempts by either side to start traffic using UDP. But I'm
new to xl2tpd/openswan so I do'nt know if I'm doing something else
wrong.

I also don't know if this could be related to my previous post where
ipsec requires a restart everytime I'm finished with a connection. In
either case, any suggestions would be great, I'm really at a loss on
how to get VPN'd into my network using XP.

J

>
> Paul
>



-- 
Jai Dhar
FPS-Tech, Santa Clara, CA
Web: http://www.fps-tech.net
Phone: 408-982-7407


More information about the Users mailing list