Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I want to setup a L2TP VPN on Ubuntu Raring (13.04) in order to connect to my home network.

I was able to successfully establish IPSec SA but tunneling doesn't seem to be worked :(

I have disabled firewall on both server and my router and tried to connect to VPN from outside network (using Windows 7 and Windows 8) and from the LAN (just to check) also using Windows XP machine, BUT NO LUCK at all. In all the times I got successful IPSec SA but no tunnelling through virtual IP.

In this particular test setup, the VPN server has two Interfaces with IPs 10.2.3.252 and 10.2.3.250. The one, 10.2.3.252 is used in IPSec VPN configuration. Router / Gateway IP is 10.2.3.254.

I want connecting clients to have IPs starting from 10.2.3.51 to 10.2.3.74

I have attached all the configuration files that I used in this setup and also the output of the /var/log/auth.log

Kindly go through them and let me know if there is anything wrong or any modification need to done in order to make this VPN setup works. Thank you in advance.

Here are the configuration files:

/etc/ipsec.conf:

version 2.0     # conforms to second version of ipsec.conf specification    
# basic configuration
config setup

        dumpdir=/var/run/pluto/
        nat_traversal=yes
        virtual_private=%v4:10.2.3.0/24
        oe=off
        protostack=netkey

conn L2TP-PSK-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    rekey=no
    ikelifetime=8h
    keylife=24h
    type=transport
    left=10.2.3.252
    leftnexthop=10.2.3.254
    leftprotoport=17/1701
    right=%any
    rightprotoport=17/%any

/etc/ipsec.secrets:

10.2.3.252   %any:  PSK "YourSharedSecret"

/etc/xl2tpd/xl2tpd.conf:

[global]

ipsec saref = yes   
[lns default]

ip range = 10.2.3.51-10.2.3.74
local ip = 10.2.3.50
refuse chap = yes
refuse pap = yes
require authentication = yes
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes

/etc/ppp/options.xl2tpd:

require-mschap-v2
ms-dns 8.8.8.8
ms-dns 8.8.4.4
asyncmap 0
auth
crtscts
lock
hide-password
modem
debug
name l2tpd
proxyarp
lcp-echo-interval 30
lcp-echo-failure 4

/etc/ppp/chap-secrets:

# client        server  secret                  IP addresses
test        l2tpd       testpassword        *

Additionally, I ran the following the shell and then restart the services, xl2tpd and ipsec.

for each in /proc/sys/net/ipv4/conf/*
do
    echo 0 > $each/accept_redirects
    echo 0 > $each/send_redirects
done

Here are the output from /var/log/auth.log:

trying to connect from LAN;

May 24 11:22:00 vpngw pluto[4571]: packet from 10.2.3.3:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
May 24 11:22:00 vpngw pluto[4571]: packet from 10.2.3.3:500: ignoring Vendor ID payload [FRAGMENTATION]
May 24 11:22:00 vpngw pluto[4571]: packet from 10.2.3.3:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
May 24 11:22:00 vpngw pluto[4571]: packet from 10.2.3.3:500: ignoring Vendor ID payload [Vid-Initial-Contact]
May 24 11:22:00 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: responding to Main Mode from unknown peer 10.2.3.3
May 24 11:22:00 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
May 24 11:22:00 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: STATE_MAIN_R1: sent MR1, expecting MI2
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: STATE_MAIN_R2: sent MR2, expecting MI3
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: Main mode peer ID is ID_IPV4_ADDR: '10.2.3.3'
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: the peer proposed: 10.2.3.252/32:17/1701 -> 10.2.3.3/32:17/0
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4: responding to Quick Mode proposal {msgid:8a722dec}
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4:   them: 10.2.3.3:17/1701
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:22:01 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #4: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x74edcc2b <0xfd07061c xfrm=3DES_0-HMAC_MD5 NATOA=none NATD=none DPD=none}
May 24 11:22:36 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: received Delete SA(0x74edcc2b) payload: deleting IPSEC State #4
May 24 11:22:36 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: received and ignored informational message
May 24 11:22:36 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3 #3: received Delete SA payload: deleting ISAKMP State #3
May 24 11:22:36 vpngw pluto[4571]: "L2TP-PSK-NAT"[2] 10.2.3.3: deleting connection "L2TP-PSK-NAT" instance with peer 10.2.3.3 {isakmp=#0/ipsec=#0}
May 24 11:22:36 vpngw pluto[4571]: packet from 10.2.3.3:500: received and ignored informational message

trying to connect from WAN / from different network;

May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring unknown Vendor ID payload [01528bbbc00696121849ab9a1c5b2a5100000001]
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000009]
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: received Vendor ID payload [RFC 3947] method set to=115
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 115
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [FRAGMENTATION]
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [MS-Negotiation Discovery Capable]
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [Vid-Initial-Contact]
May 24 11:25:46 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [IKE CGA version 1]
May 24 11:25:46 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: responding to Main Mode from unknown peer 175.157.198.74
May 24 11:25:46 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: OAKLEY_GROUP 20 not supported.  Attribute OAKLEY_GROUP_DESCRIPTION
May 24 11:25:46 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: OAKLEY_GROUP 19 not supported.  Attribute OAKLEY_GROUP_DESCRIPTION
May 24 11:25:46 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
May 24 11:25:46 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: STATE_MAIN_R1: sent MR1, expecting MI2
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring unknown Vendor ID payload [01528bbbc00696121849ab9a1c5b2a5100000001]
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000009]
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: received Vendor ID payload [RFC 3947] method set to=115
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 115
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [FRAGMENTATION]
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [MS-Negotiation Discovery Capable]
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [Vid-Initial-Contact]
May 24 11:25:47 vpngw pluto[4571]: packet from 175.157.198.74:15682: ignoring Vendor ID payload [IKE CGA version 1]
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #12: responding to Main Mode from unknown peer 175.157.198.74
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #12: OAKLEY_GROUP 20 not supported.  Attribute OAKLEY_GROUP_DESCRIPTION
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #12: OAKLEY_GROUP 19 not supported.  Attribute OAKLEY_GROUP_DESCRIPTION
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #12: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #12: STATE_MAIN_R1: sent MR1, expecting MI2
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): both are NATed
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: STATE_MAIN_R2: sent MR2, expecting MI3
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: Main mode peer ID is ID_IPV4_ADDR: '10.217.185.32'
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #11: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: new NAT mapping for #11, was 175.157.198.74:15682, now 175.157.198.74:15338
May 24 11:25:47 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp2048}
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: the peer proposed: 112.135.135.239/32:17/1701 -> 10.217.185.32/32:17/0
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13: responding to Quick Mode proposal {msgid:01000000}
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13:   them: 175.157.198.74[10.217.185.32]:17/1701===10.217.185.32/32
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #13: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x7bf3baec <0x50dc42a3 xfrm=AES_128-HMAC_SHA1 NATOA=10.217.185.32 NATD=175.157.198.74:15338 DPD=none}
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: the peer proposed: 112.135.135.239/32:17/1701 -> 10.217.185.32/32:17/1701
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14: responding to Quick Mode proposal {msgid:02000000}
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14:   them: 175.157.198.74[10.217.185.32]:17/1701===10.217.185.32/32
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14: keeping refhim=4294901761 during rekey
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #14: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0xa06b29f8 <0x03847f7d xfrm=AES_128-HMAC_SHA1 NATOA=10.217.185.32 NATD=175.157.198.74:15338 DPD=none}
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA(0x7bf3baec) payload: deleting IPSEC State #13
May 24 11:25:48 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received and ignored informational message
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: the peer proposed: 112.135.135.239/32:17/1701 -> 10.217.185.32/32:17/1701
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: responding to Quick Mode proposal {msgid:03000000}
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15:   them: 175.157.198.74[10.217.185.32]:17/1701===10.217.185.32/32
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: keeping refhim=4294901761 during rekey
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:25:51 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: next payload type of ISAKMP Hash Payload has an unknown value: 77
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: malformed payload in packet
May 24 11:25:53 vpngw pluto[4571]: | payload malformed after IV
May 24 11:25:53 vpngw pluto[4571]: |   e4 39 cd 3c  1b 07 70 25  7e 00 be a8  6c 5b 67 d7
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: sending notification PAYLOAD_MALFORMED to 175.157.198.74:15338
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #15: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x423b8f6e <0xb8fa12f4 xfrm=AES_128-HMAC_SHA1 NATOA=10.217.185.32 NATD=175.157.198.74:15338 DPD=none}
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA(0xa06b29f8) payload: deleting IPSEC State #14
May 24 11:25:53 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received and ignored informational message
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: the peer proposed: 112.135.135.239/32:17/1701 -> 10.217.185.32/32:17/1701
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16: responding to Quick Mode proposal {msgid:04000000}
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16:   them: 175.157.198.74[10.217.185.32]:17/1701===10.217.185.32/32
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16: keeping refhim=4294901761 during rekey
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #16: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x48ba2bb8 <0xa098a46f xfrm=AES_128-HMAC_SHA1 NATOA=10.217.185.32 NATD=175.157.198.74:15338 DPD=none}
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA(0x423b8f6e) payload: deleting IPSEC State #15
May 24 11:25:55 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received and ignored informational message
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: the peer proposed: 112.135.135.239/32:17/1701 -> 10.217.185.32/32:17/1701
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17: responding to Quick Mode proposal {msgid:05000000}
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17:   them: 175.157.198.74[10.217.185.32]:17/1701===10.217.185.32/32
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17: keeping refhim=4294901761 during rekey
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #17: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x35104388 <0x68c76fe2 xfrm=AES_128-HMAC_SHA1 NATOA=10.217.185.32 NATD=175.157.198.74:15338 DPD=none}
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA(0x48ba2bb8) payload: deleting IPSEC State #16
May 24 11:26:03 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received and ignored informational message
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: the peer proposed: 112.135.135.239/32:17/1701 -> 10.217.185.32/32:17/1701
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18: responding to Quick Mode proposal {msgid:06000000}
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18:     us: 10.2.3.252<10.2.3.252>:17/1701---10.2.3.254
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18:   them: 175.157.198.74[10.217.185.32]:17/1701===10.217.185.32/32
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18: keeping refhim=4294901761 during rekey
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #18: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0xd1077552 <0x34ad5c6b xfrm=AES_128-HMAC_SHA1 NATOA=10.217.185.32 NATD=175.157.198.74:15338 DPD=none}
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA(0x35104388) payload: deleting IPSEC State #17
May 24 11:26:13 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received and ignored informational message
May 24 11:26:24 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA(0xd1077552) payload: deleting IPSEC State #18
May 24 11:26:24 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: ERROR: netlink XFRM_MSG_DELPOLICY response for flow eroute_connection delete included errno 2: No such file or directory
May 24 11:26:24 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received and ignored informational message
May 24 11:26:24 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74 #11: received Delete SA payload: deleting ISAKMP State #11
May 24 11:26:24 vpngw pluto[4571]: "L2TP-PSK-NAT"[6] 175.157.198.74: deleting connection "L2TP-PSK-NAT" instance with peer 175.157.198.74 {isakmp=#0/ipsec=#0}
May 24 11:26:24 vpngw pluto[4571]: packet from 175.157.198.74:15338: received and ignored informational message
May 24 11:26:57 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74 #12: max number of retransmissions (2) reached STATE_MAIN_R1
May 24 11:26:57 vpngw pluto[4571]: "L2TP-PSK-NAT"[5] 175.157.198.74: deleting connection "L2TP-PSK-NAT" instance with peer 175.157.198.74 {isakmp=#0/ipsec=#0}

Once again sorry for the very long posting, but I hope you guys can help me to sort out this issue. Thanks.

share|improve this question
    
right now I'am looking into lists.openswan.org/pipermail/users/2011-July/020774.html I dunno if this is it, it sounds so silly to me in 2013 that windows 7 even hasn't fixed this. –  user187862 Aug 27 '13 at 19:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.