[Openswan Users] openswan/xl2tpd failing to create ppp sessions

[Jonathon Padfield]

On 28 February 2012 02:17, Paul Wouters <paul at nohats.ca> wrote:
> On Sun, 26 Feb 2012, Jonathon Padfield wrote:
>
>> I'm aiming to run a SAref enabled kernel on Ubuntu 11.10 (kernel 3.0.0-16
>> #28)
>>
>> I've followed the instructions at
>>
>> https://www.openswan.org/projects/openswan/wiki/Building_and_Installing_an_SAref_capable_KLIPS_version_for_DebianUbuntu
>> and applied the 0001/0002 patches for 2.6.38 with minor changes.
>> I was hoping to stick with a close to stock kernel & repeatable
>> process, so am using packages from
>> http://ppa.launchpad.net/openswan/openswan-testing/
>> (openswan_2.6.37-1xelerance1_i386.deb) and dkms to load the ipsec
>> module
>> Now running xl2tpd in debug mode does give a strange message
>> "setsockopt recvref[22]: Protocol not available"
>
> I think that's the error for kernel mode L2TP not being there?, thought
> it might be the SAref patch. The number "22" looks like it could be an
> older number used. Remember the SAref patch and xl2tpd need to agree on
> the socket option number (and we don't have an official one yet)

That was it. Once I'd upgraded to 1.3.1, the error about setsockopt
went away, and I could negotiate, connect, and NAT to my hearts
content from my MacBook. Thank you for your help.

>> Feb 26 10:03:01 localhost pluto[11061]: "L2TP-PSK-NAT"[2] xx.xx.xx.xx
>> #1: Applying workaround for Mac OS X NAT-OA bug, ignoring proposed
>> subnet
>
> You will need the patch for OSX/android clients from git (not yet in a
> full release, will be in openswan 2.6.38)

I'll give that a shot, as my macbook connects fine, but android and
ipad are still a work in progress.