From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 92E4A138247 for ; Thu, 19 Dec 2013 15:05:25 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 197A1E0BAB; Thu, 19 Dec 2013 15:05:13 +0000 (UTC) Received: from mail-wg0-f47.google.com (mail-wg0-f47.google.com [74.125.82.47]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E901EE0B4D for ; Thu, 19 Dec 2013 15:05:11 +0000 (UTC) Received: by mail-wg0-f47.google.com with SMTP id n12so1178756wgh.2 for ; Thu, 19 Dec 2013 07:05:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:reply-to:to:subject:date:user-agent:references:in-reply-to :mime-version:content-type:content-transfer-encoding:message-id; bh=I+ywL1GQhNt3DvS/imPdscwxkb3k0gQVMPoG5sOQz5s=; b=Kc9QQMs1U2O0PNbFOX+TfXP6xfJ4Hu0k2Or/I1k5OBNCbDIx/AFN1uVfKfW9ejvTX3 J5Tv+Ksjhnti0Yknv07pXNgkbznz2f0W44kM3RBsu1sRjw4Z0P3BdEXBFOjm2638E/Q5 R07BbtL5kgpYH+HoNuuW7VupHjabsIisanDFSzPafnIORAkkPQbeB3TttjbezdyOm5Ei YDokyVNClHxKtk7mAQS9SlqFmtkVYflgRbQIAKcNxiQbMuoLDb2B2ZWmwo+gm7eEVdOn 19M6H7vT0rCyP5zvWAXkWTfrj/gJTRHNej/wstO7FKPeZj8W6Q7h4CDNQ41mUucpVfUn esWw== X-Received: by 10.180.126.38 with SMTP id mv6mr570738wib.59.1387465510551; Thu, 19 Dec 2013 07:05:10 -0800 (PST) Received: from dell_xps.localnet (230.3.169.217.in-addr.arpa. [217.169.3.230]) by mx.google.com with ESMTPSA id cy10sm164415wjb.6.2013.12.19.07.05.07 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 19 Dec 2013 07:05:08 -0800 (PST) From: Mick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] problem with l2tp-isec Date: Thu, 19 Dec 2013 15:04:40 +0000 User-Agent: KMail/1.13.7 (Linux/3.10.17-gentoo; KDE/4.11.2; x86_64; ; ) References: <5254.1387463248@ccs.covici.com> In-Reply-To: <5254.1387463248@ccs.covici.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1994263.hg0vTBWp7u"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <201312191504.50766.michaelkintzios@gmail.com> X-Archives-Salt: 57d3655a-6754-4ea0-a12c-3a10d5d959b9 X-Archives-Hash: 5a83eff9a644fa4432bb7d50d51afc85 --nextPart1994263.hg0vTBWp7u Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable On Thursday 19 Dec 2013 14:27:28 covici@ccs.covici.com wrote: > Hi. I am trying to configure l2tp-isec to a server and although it > works in Winblows, whenever I put c followed by the name, it times out. > I am not seeing any particular bad messages, except that netlink says 20 > bytes left over after parsing attributes, but there seems to be no > solution to that. I am using openswan plus xl2tp. >=20 >=20 > How can I troubleshoot this, or should I post my configs here? >=20 > Thanks in advance for any suggestions. Have you followed suggestions relevant to openswan and xl2tpd here? http://wiki.gentoo.org/wiki/IPsec_L2TP_VPN_server Increase the verbosity of the openswan debugging to see if ipsec is=20 established, or why it fails. If the ipsec association is established, then check the x2ltp configuration= =20 and set 'debug tunnel =3D yes' to get more information from it, or start it= as=20 'xl2tpd -D' to get some useful information until you get it going. However, if you are using Windows >=3D7 then it may be better to install an= d run=20 StrongSwan with IKEv2 on Linux, which MSWindows can now support natively an= d=20 do away with L2TP all together. Openswan also supports IKEv2. =2D-=20 Regards, Mick --nextPart1994263.hg0vTBWp7u Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAABAgAGBQJSswsSAAoJELAdA+zwE4Ye10gH/36TIWb1LkBrhZeAtXHCwttL aPdNiNWe0pAjdhrqi8Ll3ozv/KcycnGYGgQAzKKhzIy2W+iyG1Kk2Z93Ajhlgh2q ym115+hRkipqS4w7cwPWBDj5IrmJ5IaHxMJBauxACGZRcPtj8JGN3aieaysJ72hJ Q/5xbrstuuq1puY5CcLhbfcuRaOlVfyroggEseT5NRj+050jrs7hMTMOVHTTbW+p rjMzxbtJUm7qaX26pJH8m6THFgwhsnH6qPVVvsG41fdTg7R3PdkOOeg//MH8WoNp OiIKlouy7WdrG89sy95rwNk7OLukHYepRmpaXGzKxXB7FwX/UrOGQTfVwFqAIhE= =p+dM -----END PGP SIGNATURE----- --nextPart1994263.hg0vTBWp7u--