<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><span style="font-family:Courier"><p style="margin:0px;font-family:Arial">Hi all, </p><p style="margin:0px;font-family:Arial;min-height:15px">
<br></p><p style="margin:0px;font-family:Arial">I think i really did my best but even after having read so (too) much of the mailing list, i finish posting here :)</p><p style="margin:0px;font-family:Arial">To sum up quickly :</p>
<p style="margin:0px;font-family:Arial;min-height:15px"><br></p><p style="margin:0px;font-family:Arial">OS running strongswan : debian 6.0.3</p><p style="margin:0px;font-family:Arial;min-height:15px"><br></p><p style="margin:0px;font-family:Arial">
I installed strongswan this way:</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial;min-height:15px"><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">apt-get install build-essential fakeroot dpkg-dev devscripts</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">apt-get source strongswan </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">apt-get install libcurl4-openssl-dev </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">apt-get build-dep strongswan </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">vi strongswan-4.4.1/debian/rules</p>
<p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px"><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">/*****[strongswan-4.4.1/debian/rules]******/</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
CONFIGUREARGS := --prefix=/usr --sysconfdir=/etc --localstatedir=/var \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial"> --libexecdir=/usr/lib \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
--enable-ldap --enable-curl \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial"> --with-capabilities=libcap \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
--enable-smartcard \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial"> --with-default-pkcs11=/usr/lib/opensc-pkcs11.so \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
--enable-mediation --enable-medsrv --enable-medcli \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial"> --enable-openssl --enable-agent \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
--enable-eap-radius --enable-eap-identity --enable-eap-md5 \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial"> --enable-eap-gtc --enable-eap-aka --enable-eap-mschapv2 \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
--enable-sql --enable-integrity-test \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial"> --enable-nm --enable-ha --enable-dhcp --enable-farp \</p><p style="color:rgb(102,102,102);margin:0px;font-family:Arial">
--enable-test-vectors \</p><p style="font-size:18px;color:rgb(102,102,102);margin:0px;font-family:Arial"><span style="font-size:13px"> </span><b>--enable-nat-transport</b></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">
/***********/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">dpkg-buildpackage -rfakeroot -uc -b</p><p style="font-size:12px;margin:0px">Then installed everything with :</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px">
<br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">dpkg -i *.deb</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Results :</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"><b>dpkg -l | grep strong</b></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><b></b><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
ii libstrongswan 4.4.1-5.2 strongSwan utility and crypto library</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">rc network-manager-strongswan 1.1.2-1 network management framework (strongSwan plugin)</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">ii strongswan 4.4.1-5.2 IPsec VPN solution metapackage</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
ii strongswan-dbg 4.4.1-5.2 strongSwan library and binaries - debugging symbols</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">ii strongswan-ikev1 4.4.1-5.2 strongSwan Internet Key Exchange (v1) daemon</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">ii strongswan-ikev2 4.4.1-5.2 strongSwan Internet Key Exchange (v2) daemon</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
ii strongswan-nm 4.4.1-5.2 strongSwan plugin to interact with NetworkManager</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">ii strongswan-starter 4.4.1-5.2 strongSwan daemon starter and configuration file parser</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="margin:0px;font-size:12px"><font size="4">From here, everything fine, my setup is he following :</font></p><p style="margin:0px;font-size:12px;min-height:14px">
<font size="4"><br></font></p><p style="margin:0px;font-size:12px"><font size="4">On one side :</font></p><p style="margin:0px;font-size:12px;min-height:14px"><font size="4"><br></font></p><p style="margin:0px;font-size:12px">
<font size="4">Debian strongswan vpn server : <a href="http://192.168.0.20/24" target="_blank" style="color:rgb(17,85,204)">192.168.0.20/24</a></font></p><p style="margin:0px;font-size:12px"><font size="4">ADSL Gateway : <a href="http://192.168.0.254/24" target="_blank" style="color:rgb(17,85,204)">192.168.0.254/24</a></font></p>
<p style="margin:0px;font-size:12px"><font size="4">Public IP : 88.185.173.199</font></p><p style="margin:0px;font-size:12px;min-height:14px"><font size="4"><br></font></p><p style="margin:0px;font-size:12px"><font size="4">On the other side, the client (OSX 10.6.8 native client) one :</font></p>
<p style="margin:0px;font-size:12px;min-height:14px"><font size="4"><br></font></p><p style="margin:0px;font-size:12px"><font size="4">PUBLIC IP : <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a></font></p>
<p style="margin:0px;font-size:12px"><font size="4">ADSL Gateway : <a href="http://192.168.1.1/24" target="_blank" style="color:rgb(17,85,204)">192.168.1.1/24</a></font></p><p style="margin:0px;font-size:12px"><font size="4">OSX Client : <a href="http://192.168.1.100/24" target="_blank" style="color:rgb(17,85,204)">192.168.1.100/24</a></font></p>
<p style="margin:0px;font-size:12px;min-height:14px"><font size="4"><br></font></p><p style="margin:0px;font-size:12px"><font size="4">so according some post in the mailing list, i configured as follow :</font></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px">
<br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px"><b>/etc/ipsec.conf</b> </p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/*****/******/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
config setup</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> <b>nat_traversal=yes</b></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> charonstart=yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
plutostart=yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> #higher debug level mode</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> plutodebug="control controlmore"</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">conn l2tp-psk-nat</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
authby=psk</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> pfs=no</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> #keyexchange=ikev1</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
rekey=no</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> type=transport</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> #esp=aes128-sha1</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
#ike=aes128-sha-modp1024</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> left=%defaultroute</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> leftsubnet=<a href="http://88.185.173.199/32" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px"> leftprotoport=17/1701</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> rightprotoport=17/%any</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
auto=add</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/***********/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px">
<b>/etc/ipsec.secrets </b></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/******chmod 600*****/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">192.168.0.20 %any : PSK "mySecretKey"</p>
<p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/***********/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px">
<b>/etc/xl2tpd/xl2tpd.conf</b></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/***********/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">[global]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
debug network = yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">debug tunnel = yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">port = 1701</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
ipsec saref = no</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">[lns default]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
ip range = 192.168.2.35-192.168.2.39</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">local ip = 192.168.2.34</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">refuse chap = yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
refuse pap = yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">require authentication = yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">ppp debug = yes</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
pppoptfile = /etc/ppp/options.xl2tpd</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">length bit = yes</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/***********/</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px">
<br></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px"><br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px"><b>/etc/ppp/options.xl2tpd</b></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">
/***********/</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">ipcp-accept-local</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">ipcp-accept-remote</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
ms-dns <a href="tel:212.27.40.240" value="+12122740240" target="_blank" style="color:rgb(17,85,204)">212.27.40.240</a></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">noccp</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
auth</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">crtscts</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">idle 1800</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">mtu 1500</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">mru 1500</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">nodefaultroute</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">debug</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
lock</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">proxyarp</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">connect-delay 5000</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">
/***********/</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px"><br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px"><b>/etc/ppp/chap-secrets</b></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">
/*****chmod 600******/</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)"># client server secret IP addresses</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">myUser l2tpd myUserSecret *</p>
<p style="font-size:12px;margin:0px;color:rgb(102,102,102)">/***********/</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px"><br></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">
Logs results :</p><p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px"><br></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102)">command </p><p style="font-size:18px;color:rgb(102,102,102);margin:0px;min-height:22px">
<b></b><br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px"><b>ipsec statusall</b></p><p style="font-size:12px;margin:0px;color:rgb(102,102,102);min-height:14px"><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
000 Status of IKEv1 pluto daemon (strongSwan 4.4.1):</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 interface lo/lo ::1:500</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 interface lo/lo <a href="http://127.0.0.1:4500/" target="_blank" style="color:rgb(17,85,204)">127.0.0.1:4500</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 interface lo/lo <a href="http://127.0.0.1:500/" target="_blank" style="color:rgb(17,85,204)">127.0.0.1:500</a></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
000 interface eth0/eth0 <a href="http://192.168.0.20:4500/" target="_blank" style="color:rgb(17,85,204)">192.168.0.20:4500</a></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 interface eth0/eth0 <a href="http://192.168.0.20:500/" target="_blank" style="color:rgb(17,85,204)">192.168.0.20:500</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 %myid = '%any'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 loaded plugins: curl ldap aes des sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem openssl hmac gmp xauth attr resolve </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 debug options: control+controlmore</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
000 "l2tp-psk-nat": <a href="http://88.185.173.199/32===192.168.0.20%5B192.168.0.20%5D:17/1701---192.168.0.254...%any[%any]:17/%any" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32===192.168.0.20[192.168.0.20]:17/1701---192.168.0.254...%any[%any]:17/%any</a>; unrouted; eroute owner: #0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 "l2tp-psk-nat": ike_life: 10800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
000 "l2tp-psk-nat": policy: PSK+ENCRYPT+DONTREKEY; prio: 32,32; interface: eth0; </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 "l2tp-psk-nat": newest ISAKMP SA: #0; newest IPsec SA: #0; </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">000 </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Status of IKEv2 charon daemon (strongSwan 4.4.1):</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
uptime: 12 seconds, since Sep 18 00:32:37 2012</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> malloc: sbrk 270336, mmap 0, used 175544, free 94792</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
worker threads: 6 idle of 16, job queue load: 0, scheduled events: 0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> loaded plugins: curl ldap aes des sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem openssl fips-prf xcbc hmac agent gmp attr resolve kernel-netlink socket-raw farp stroke updown eap-identity eap-aka eap-md5 eap-gtc eap-mschapv2 nm dhcp </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Listening IP addresses:</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> 192.168.0.20</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Connections:</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Security Associations:</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"> none</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px">
<br></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px"><b>auth.log when i start the service :</b></p><p style="font-size:18px;color:rgb(102,102,102);margin:0px;min-height:22px"><b></b><br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:34:55 debian ipsec_starter[11137]: Starting strongSwan 4.4.1 IPsec [starter]...</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: Starting IKEv1 pluto daemon (strongSwan 4.4.1) THREADS SMARTCARD VENDORID</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: plugin 'test-vectors' failed to load: /usr/lib/ipsec/plugins/libstrongswan-test-vectors.so: cannot open shared object file: No such file or directory</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: attr-sql plugin: database URI not set</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: plugin 'attr-sql': failed to load - attr_sql_plugin_create returned NULL</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: loaded plugins: curl ldap aes des sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem openssl hmac gmp xauth attr resolve </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:34:55 debian pluto[11151]: including NAT-Traversal patch (Version 0.6c)</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | pkcs11 module '/usr/lib/opensc-pkcs11.so' loading...</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | pkcs11 module initializing...</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | pkcs11 module loaded and initialized</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 2</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 3</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 4</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 5</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 6</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 7</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 8</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 9</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 10</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 11</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 12</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 13</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 14</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: no token present in slot 15</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: Using Linux 2.6 IPsec interface code</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian ipsec_starter[11150]: pluto (11151) started after 20 ms</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: loading ca certificates from '/etc/ipsec.d/cacerts'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: loading aa certificates from '/etc/ipsec.d/aacerts'</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:34:55 debian pluto[11151]: Changing to directory '/etc/ipsec.d/crls'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: loading attribute certificates from '/etc/ipsec.d/acerts'</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | inserting event EVENT_LOG_DAILY, timeout in 84305 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | next event EVENT_REINIT_SECRET in 3600 seconds</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | *received whack message</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: listening for IKE messages</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | found lo with address 127.0.0.1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | found eth0 with address 192.168.0.20</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: adding interface eth0/eth0 <a href="http://192.168.0.20:500/" target="_blank" style="color:rgb(17,85,204)">192.168.0.20:500</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: adding interface eth0/eth0 <a href="http://192.168.0.20:4500/" target="_blank" style="color:rgb(17,85,204)">192.168.0.20:4500</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: adding interface lo/lo <a href="http://127.0.0.1:500/" target="_blank" style="color:rgb(17,85,204)">127.0.0.1:500</a></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:34:55 debian pluto[11151]: adding interface lo/lo <a href="http://127.0.0.1:4500/" target="_blank" style="color:rgb(17,85,204)">127.0.0.1:4500</a></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | found lo with address 0000:0000:0000:0000:0000:0000:0000:0001</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: adding interface lo/lo ::1:500</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | certs and keys locked by 'free_preshared_secrets'</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | certs and keys unlocked by 'free_preshard_secrets'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:34:55 debian pluto[11151]: loading secrets from "/etc/ipsec.secrets"</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: loaded PSK secret for 192.168.0.20 %any </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | certs and keys locked by 'process_secret'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | certs and keys unlocked by 'process_secrets'</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | next event EVENT_REINIT_SECRET in 3600 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian ipsec_starter[11150]: charon (11162) started after 40 ms</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | *received whack message</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | from whack: got --esp=aes128-sha1</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | esp proposal: AES_CBC_128/HMAC_SHA1, </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | from whack: got --ike=aes128-sha-modp1024</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | ike proposal: AES_CBC_128/HMAC_SHA1/MODP_1024, </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: <b>added connection description "l2tp-psk-nat"</b></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:34:55 debian pluto[11151]: | <a href="http://88.185.173.199/32===192.168.0.20%5B192.168.0.20%5D:17/1701---192.168.0.254...%any[%any]:17/%any" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32===192.168.0.20[192.168.0.20]:17/1701---192.168.0.254...%any[%any]:17/%any</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | ike_life: 10800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT+DONTREKEY</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:34:55 debian pluto[11151]: | next event EVENT_REINIT_SECRET in 3600 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px">
<br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px"><br></p><p style="font-size:18px;margin:0px;color:rgb(255,18,18)"><b>auth.log when a client try to connect :</b></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px;min-height:14px">
<br></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | *received 300 bytes from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500 on eth0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: received Vendor ID payload [RFC 3947]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [4df37928e9fc4fd1b3262170d515c662]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [9909b64eed937c6573de52ace952fa6b]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from <a href="tel:84.78.198.299" value="+18478198299" target="_blank" style="color:rgb(17,85,204)">84.78.198.299</a>:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: packet from 84.78.198.299:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: packet from 84.78.198.299:500: received Vendor ID payload [Dead Peer Detection]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | preparse_isakmp_policy: peer requests PSK authentication</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | instantiated "l2tp-psk-nat" for 84.78.198.299</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | creating state object #1 at 0xb8d9c320</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | peer: 54 4e c6 e0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | state hash entry 23</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: "l2tp-psk-nat"[1] 84.78.198.299 #1: responding to Main Mode from unknown peer 84.78.198.299</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | next event EVENT_RETRANSMIT in 10 seconds for #1</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | *received 228 bytes from 84.78.198.299:500 on eth0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | peer: 54 4e c6 e0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | state hash entry 23</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | state object #1 found, in STATE_MAIN_R1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: "l2tp-psk-nat"[1] 84.78.198.299 #1: NAT-Traversal: Result using RFC 3947: both are NATed</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 20 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | next event EVENT_RETRANSMIT in 10 seconds for #1</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | *received 100 bytes from 84.78.198.299:4501 on eth0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | peer: 54 4e c6 e0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | state hash entry 23</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | state object #1 found, in STATE_MAIN_R2</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: "l2tp-psk-nat"[1] 84.78.198.299 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: "l2tp-psk-nat"[1] 84.78.198.299 #1: Peer ID is ID_IPV4_ADDR: '192.168.1.110'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | peer CA: %none</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | l2tp-psk-nat: no match (id: no, auth: ok, trust: ok, request: ok, prio: 2048)</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: | l2tp-psk-nat: full match (id: ok, auth: ok, trust: ok, request: ok, prio: 1216)</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | offered CA: %none</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | switched from "l2tp-psk-nat" to "l2tp-psk-nat"</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: | instantiated "l2tp-psk-nat" for 84.78.198.299</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299 #1: deleting connection "l2tp-psk-nat" instance with peer 84.78.198.299 {isakmp=#0/ipsec=#0}</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | certs and keys locked by 'delete_connection'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | certs and keys unlocked by 'delete_connection'</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | <b>NAT-T: </b>new mapping 84.78.198.299:500/4501)</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: | inserting event EVENT_SA_EXPIRE, timeout in 3600 seconds for #1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:27 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501 #1: sent MR3, ISAKMP SA established</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:27 debian pluto[11151]: | next event EVENT_NAT_T_KEEPALIVE in 20 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | </p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">
Sep 17 18:37:28 debian pluto[11151]: | *received 252 bytes from 84.78.198.299:4501 on eth0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | peer: 54 4e c6 e0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | state hash entry 23</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | state object not found</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | peer: 54 4e c6 e0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | state hash entry 23</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | state object #1 found, in STATE_MAIN_R3</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | peer client is 192.168.1.110</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | peer client protocol/port is 17/53734</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | our client is 88.185.173.199</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | our client protocol/port is 17/1701</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | find_client_connection starting with l2tp-psk-nat</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | looking for <a href="http://88.185.173.199/32:17/1701" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32:17/1701</a> -> <a href="http://192.168.1.110/32:17/53734" target="_blank" style="color:rgb(17,85,204)">192.168.1.110/32:17/53734</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | concrete checking against sr#0 <a href="http://88.185.173.199/32" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32</a> -> 84.78.198.299/32</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try trying l2tp-psk-nat:<a href="http://88.185.173.199/32:17/1701" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32:17/1701</a> -> <a href="http://192.168.1.110/32:17/0" target="_blank" style="color:rgb(17,85,204)">192.168.1.110/32:17/0</a>vs l2tp-psk-nat:<a href="http://88.185.173.199/32:17/1701" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32:17/1701</a> -> 84.78.198.299/32:17/0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try concluding with none [0]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try l2tp-psk-nat gives none</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | checking hostpair <a href="http://88.185.173.199/32" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32</a> -> 84.78.198.299/32 is found</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try trying l2tp-psk-nat:<a href="http://88.185.173.199/32:17/1701" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32:17/1701</a> -> <a href="http://192.168.1.110/32:17/0" target="_blank" style="color:rgb(17,85,204)">192.168.1.110/32:17/0</a>vs l2tp-psk-nat:<a href="http://88.185.173.199/32:17/1701" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32:17/1701</a> -> <a href="http://0.0.0.0/32:17/0" target="_blank" style="color:rgb(17,85,204)">0.0.0.0/32:17/0</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try concluding with none [0]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try_oppo trying l2tp-psk-nat:<a href="http://88.185.173.199/32" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32</a> -> <a href="http://192.168.1.110/32" target="_blank" style="color:rgb(17,85,204)">192.168.1.110/32</a> vs l2tp-psk-nat:<a href="http://88.185.173.199/32" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32</a> -> <a href="http://0.0.0.0/32" target="_blank" style="color:rgb(17,85,204)">0.0.0.0/32</a></p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | fc_try_oppo concluding with none [0]</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:28 debian pluto[11151]: | concluding with d = none</p>
<p style="font-size:12px;margin:0px"><font color="#ff0000">Sep 17 18:37:28 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501 #1: cannot respond to IPsec SA request because no connection is known for <a href="http://88.185.173.199/32===192.168.0.20:4500%5B192.168.0.20%5D:17/1701...84.78.198.299:4501%5B192.168.1.110%5D:17/%any===192.168.1.110/32" target="_blank" style="color:rgb(17,85,204)">88.185.173.199/32===192.168.0.20:4500[192.168.0.20]:17/1701...84.78.198.299:4501[192.168.1.110]:17/%any===192.168.1.110/32</a></font></p>
<p style="font-size:12px;margin:0px"><font color="#ff0000">Sep 17 18:37:28 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501 #1: sending encrypted notification INVALID_ID_INFORMATION to 84.78.198.299:4501</font></p>
<p style="font-size:12px;margin:0px"><font color="#ff0000">Sep 17 18:37:28 debian pluto[11151]: | state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION</font></p><p style="font-size:12px;margin:0px">
<font color="#ff0000">Sep 17 18:37:28 debian pluto[11151]: | next event EVENT_NAT_T_KEEPALIVE in 19 seconds</font></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | *received 252 bytes from 84.78.198.299:4501 on eth0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | peer: 54 4e c6 e0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state hash entry 23</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state object not found</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | peer: 54 4e c6 e0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state hash entry 23</p>
<p style="font-size:12px;margin:0px"><font color="#cc0000">Sep 17 18:37:31 debian pluto[11151]: | state object #1 found, in STATE_MAIN_R3</font></p><p style="font-size:12px;margin:0px"><font color="#cc0000">Sep 17 18:37:31 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x767ae29b (perhaps this is a duplicated packet)</font></p>
<p style="font-size:12px;margin:0px"><font color="#cc0000">Sep 17 18:37:31 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501 #1: sending encrypted notification INVALID_MESSAGE_ID to 84.78.198.299:4501</font></p>
<p style="font-size:12px;margin:0px"><font color="#cc0000">Sep 17 18:37:31 debian pluto[11151]: | next event EVENT_NAT_T_KEEPALIVE in 16 seconds</font></p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | *received 84 bytes from 84.78.198.299:4501 on eth0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | peer: 54 4e c6 e0</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state hash entry 23</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state object #1 found, in STATE_MAIN_R3</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | peer: 54 4e c6 e0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state hash entry 23</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state object #1 found, in STATE_MAIN_R3</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501 #1: received Delete SA payload: deleting ISAKMP State #1</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | ICOOKIE: 96 61 2d 50 c6 46 15 77</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | RCOOKIE: 32 f3 92 fa 6c af 23 86</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | peer: 54 4e c6 e0</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | state hash entry 23</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: "l2tp-psk-nat"[2] 84.78.198.299:4501: deleting connection "l2tp-psk-nat" instance with peer 84.78.198.299 {isakmp=#0/ipsec=#0}</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | certs and keys locked by 'delete_connection'</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | certs and keys unlocked by 'delete_connection'</p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:31 debian pluto[11151]: | next event EVENT_NAT_T_KEEPALIVE in 16 seconds</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:47 debian pluto[11151]: | </p>
<p style="font-size:12px;color:rgb(102,102,102);margin:0px">Sep 17 18:37:47 debian pluto[11151]: | *time to handle event</p><p style="font-size:12px;color:rgb(102,102,102);margin:0px"><br></p></span><span style="font-family:Arial"><font size="4">So here i am, i really tried the best i can, but i'm running out of ideas :((( I underlined in the latest log what's i think its going wrong, but despite that it seems to be a NAT problem, everything is nated correctly on the ADSL router</font></span></div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><font face="Arial" size="4"><br></font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<font face="Arial" size="4">the port 1701, 4500, 500 in udp are well nated to my vpn server, any ideas, any suggestions will be more than welcome ;)</font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<font face="Arial" size="4"><br></font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><font face="Arial" size="4">Thanks a lot in advance for your precious help and sorry for the level of logs, but the more the debug level of log is, the easier is the way to find out what is going wrong ;)</font></div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><font face="Arial" size="4"><br></font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<font face="Arial" size="4">Best Regards</font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><font face="Arial" size="4"><br></font></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<font face="Arial"><font size="4">Steve</font></font></div>