Hi<br><br>I am trying to setting up an l2tp/ipsec tunnel between Android (which uses racoon 1) and my server (strong 4.3.5 + xl2tpd). Yet I met below errors:<br><br>Mar 26 09:37:09 xia-laptop pluto[6695]: "rw"[1] 192.168.1.170 #1: NAT-Traversal: Result using RFC 3947: peer is NATed<br>
Mar 26 09:37:09 xia-laptop pluto[6695]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 20 seconds<br>Mar 26 09:37:09 xia-laptop pluto[6695]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1<br>Mar 26 09:37:09 xia-laptop pluto[6695]: | next event EVENT_RETRANSMIT in 10 seconds for #1<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | <br>Mar 26 09:37:19 xia-laptop pluto[6695]: | *received 228 bytes from <a href="http://192.168.1.170:500">192.168.1.170:500</a> on eth1<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | ICOOKIE: 04 8d e9 35 55 9d 65 a0<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | RCOOKIE: 10 01 8b fc fc 8e fc d7<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | peer: c0 a8 01 aa<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | state hash entry 30<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | state object #1 found, in STATE_MAIN_R2<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: "rw"[1] 192.168.1.170 #1: discarding duplicate packet; already STATE_MAIN_R2<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | next event EVENT_RETRANSMIT in 0 seconds for #1<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | <br>Mar 26 09:37:19 xia-laptop pluto[6695]: | *time to handle event<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | event after this is EVENT_NAT_T_KEEPALIVE in 10 seconds<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | handling event EVENT_RETRANSMIT for 192.168.1.170 "rw" #1<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | inserting event EVENT_RETRANSMIT, timeout in 20 seconds for #1<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | next event EVENT_NAT_T_KEEPALIVE in 10 seconds<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | <br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | *received 76 bytes from <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> on eth1<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | ICOOKIE: 04 8d e9 35 55 9d 65 a0<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | RCOOKIE: 10 01 8b fc fc 8e fc d7<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | peer: c0 a8 01 aa<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | state hash entry 30<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | state object #1 found, in STATE_MAIN_R2<br>Mar 26 09:37:19 xia-laptop pluto[6695]: "rw"[1] 192.168.1.170 #1: Peer ID is ID_IPV4_ADDR: '192.168.0.4'<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | peer CA: %none<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | offered CA: %none<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | switched from "rw" to "rw"<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | instantiated "rw" for 192.168.1.170<br>Mar 26 09:37:19 xia-laptop pluto[6695]: "rw"[2] 192.168.1.170 #1: deleting connection "rw" instance with peer 192.168.1.170 {isakmp=#0/ipsec=#0}<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | NAT-T: new mapping <a href="http://192.168.1.170:500/4500">192.168.1.170:500/4500</a>)<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | inserting event EVENT_SA_REPLACE, timeout in 10530 seconds for #1<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: "rw"[2] <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> #1: sent MR3, ISAKMP SA established<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | next event EVENT_NAT_T_KEEPALIVE in 10 seconds<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | <br>Mar 26 09:37:19 xia-laptop pluto[6695]: | *received 92 bytes from <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> on eth1<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | ICOOKIE: 04 8d e9 35 55 9d 65 a0<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: | RCOOKIE: 10 01 8b fc fc 8e fc d7<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | peer: c0 a8 01 aa<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | state hash entry 30<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | state object #1 found, in STATE_MAIN_R3<br>
Mar 26 09:37:19 xia-laptop pluto[6695]: "rw"[2] <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT<br>Mar 26 09:37:19 xia-laptop pluto[6695]: | next event EVENT_NAT_T_KEEPALIVE in 10 seconds<br>
Mar 26 09:37:20 xia-laptop pluto[6695]: | <br>Mar 26 09:37:20 xia-laptop pluto[6695]: | *received 284 bytes from <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> on eth1<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | ICOOKIE: 04 8d e9 35 55 9d 65 a0<br>
Mar 26 09:37:20 xia-laptop pluto[6695]: | RCOOKIE: 10 01 8b fc fc 8e fc d7<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | peer: c0 a8 01 aa<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | state hash entry 30<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | state object not found<br>
Mar 26 09:37:20 xia-laptop pluto[6695]: | ICOOKIE: 04 8d e9 35 55 9d 65 a0<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | RCOOKIE: 10 01 8b fc fc 8e fc d7<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | peer: c0 a8 01 aa<br>
Mar 26 09:37:20 xia-laptop pluto[6695]: | state hash entry 30<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | state object #1 found, in STATE_MAIN_R3<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | peer client is 192.168.0.4<br>
Mar 26 09:37:20 xia-laptop pluto[6695]: | peer client protocol/port is 17/0<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | our client is 192.168.1.159<br>Mar 26 09:37:20 xia-laptop pluto[6695]: | our client protocol/port is 17/1701<br>
Mar 26 09:37:20 xia-laptop pluto[6695]: "rw"[2] <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> #1: cannot respond to IPsec SA request because no connection is known for 192.168.1.159:4500[192.168.1.159]:17/1701...192.168.1.170:4500[192.168.0.4]:17/0===<a href="http://192.168.0.4/32">192.168.0.4/32</a><br>
Mar 26 09:37:20 xia-laptop pluto[6695]: "rw"[2] <a href="http://192.168.1.170:4500">192.168.1.170:4500</a> #1: sending encrypted notification INVALID_ID_INFORMATION to <a href="http://192.168.1.170:4500">192.168.1.170:4500</a><br>
Mar 26 09:37:20 xia-laptop pluto[6695]: | state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION<br><br><br>Can some body help me which configuration I made wrong? Below is my ipsec.conf<br><br># /etc/ipsec.conf - strongSwan IPsec configuration file<br>
<br>config setup<br> crlcheckinterval=180<br> nat_traversal=yes<br> strictcrlpolicy=no<br> plutodebug=control<br> charonstart=no<br><br>conn %default%<br> ikelifetime=60m<br> keylife=20m<br>
rekeymargin=3m<br> keyingtries=1<br><br>conn rw<br> left=192.168.1.159<br> leftsubnet=<a href="http://10.1.0.0/16">10.1.0.0/16</a><br> leftfirewall=yes<br> right=%any<br> authby=secret<br> auto=add<br>
<br>thanks, Xia Weizhong<br><br><br><br><br>