[Openswan Users] l2tpns and windows 7

[Bob Miller]

On Thu, 2011-01-06 at 22:25 -0500, Paul Wouters wrote:
> On Thu, 6 Jan 2011, Bob Miller wrote:
> 
> > I hope it is not bad netiquette to ask on this list about l2tpns, and I
> > apologize in advance if it is.
> 
> No problem, though we'll be less useful then a group dedicated to l2tpns.

I am suspecting a good number of that group is in this group.  Hoping
so, anyway...

> 
> > My current situation is working with XP, but fails with windows 7.
> 
> There were several changes in the ipsec layer between those two. For example
> you might need to switch from protoport=17/0 to protoport=17/%any

I did try %any and 1701, forgot to try 0.  Thanks, will give it a go...

> 
> Other then that, without openswan logs, there isnt much I can say.

Alas, this reports total success.  SA established, hangs on for 60
seconds or so, and then disconnects when l2tpns times out.
The l2tpns logs report:
Duplicate SCCRQ?
Control message (88 bytes): (unacked 1) l-ns 1 l-nr 1 r-ns 0 r-nr 0
   Out of sequence tunnel 1, (0 is not the expected 1)

traffic seems to be going in both directions, but this sure smells like
a firewall...

> 
> Paul

Bob Miller
334-7117/660-5315
http://computerisms.ca
bob at computerisms.ca
Network, Internet, Server,
and Open Source Solutions