[Openswan Users] Error in OPENSWAN with XL2TP

[Paul Wouters]

On Mon, 13 Jun 2011, heta shah wrote:

> I have that network in IPSEC.conf file in virtual_host but still issue is not resolved now this error is coming .

Then you are missing the proper rightsubnet=vhost:%priv,%no setting, or the connection
is not matched properly.

Paul

> 
> : ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
> : ignoring Vendor ID payload [FRAGMENTATION]
> : received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106 
> : packet from 192.168.1.35:500: ignoring Vendor ID payload [Vid-Initial-Contact]
> : packet from 192.168.1.35:500: initial Main Mode message received on 192.168.1.6:500 but no connection has been authorized with
> policy=PSK
> 
> 
> 
> 
> On Fri, Jun 10, 2011 at 7:38 PM, Paul Wouters <paul at xelerance.com> wrote:
>       On Fri, 10 Jun 2011, heta shah wrote:
>
>             I have return that listen-addr option but still issue is coming . XP clients cannot connect to the VPN
>             server with IPSEC with
>             L2TP . Please help me.
> 
>
>       a private network virtual IP was required, but the proposed IP did not match our list (virtual_private=)
> 
> 
> Your XP is on a weird internal IP range not within RFC1918. If you want to allow
> that, you have to add it to the virtual_private= option. See "man ipsec.conf"
> 
> Paul
> 
> 
> 
> 
> --
> Thanks and Regards.
> 
> Heta Shah
> 
> 
> 
> 
>