[Openswan Users] l2tp vpn server in ubuntu 10.4 cannot be connected

SVM svm7 at mail15.com
Wed Apr 11 22:04:53 EDT 2012


10.04.2012 20:12, chenkaiye at ccpower.com.cn wrote:

> 1) OS: ubuntu 10.04.4
> 2) openswan version: openswan_2.6.28+dfsg-5_amd64.deb (downloaded from
> pkgs.org )

openswan_2.6.28+dfsg-5 is pretty new for Ubuntu 10.04.4 or compiled by 
hand. It suppose to be v2.6.23 in LTS 10.04.4.
You probably used "proposed" in /etc/apt/sources.list???


> protostack=auto

Set "protostack=netkey" in ipsec.conf in "config setup" section, so you 
don't need to use KLIPS stack for your configuration.


> conn L2TP-PSK-NAT
> 	rightsubnet=vhost:%priv,%no,%v4:10.0.0.0/8,%v4:192.168.0.0/16,%4:172.16.0.0/12/

I think, here is your problem.
First of all, remove this whole line(or comment it by #) from config and 
try again. :) Did you write it yourself? Think of your topology some more!


 > And the VPN server connect to the Internet directly with public ip
 > address, no NAT.

Lucky you. It's hard to find "real white" ip-address for now.

Cheers...



More information about the Users mailing list