<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Any one is facing the similar issues.<br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Also for site to site vpn case vpn tunnel is up and running. After restarting one device the tunnel is failed come up automatically. After restarting the ipsec the tunnel is coming up. <br><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Thanks,<br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Jayapal<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 28, 2015 at 4:55 PM, Jayapal Reddy <span dir="ltr"><<a href="mailto:jayapalatiiit@gmail.com" target="_blank">jayapalatiiit@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099">Any help on this please ??</div><span class="HOEnZb"><font color="#888888"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099">-Jayapal</div></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Oct 27, 2015 at 12:27 PM, Jayapal Reddy <span dir="ltr"><<a href="mailto:jayapalatiiit@gmail.com" target="_blank">jayapalatiiit@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">I am using the strongswan ipsec. I have the remote access vpn setup and windows7 client behind NAT got connected successfully.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">The problem comes on restart of ipsec device or configuration update of the ipsec. After restarting my ipsec device vpn client is failed to reconnect. If restart ipsec or down the connection it is able to reconnect.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">On restart or config update I am using the '<span style="color:rgb(0,0,0);font-family:Menlo;font-size:12pt">ipsec down L2TP-PSK' to down the existing connections.</span></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><span style="color:rgb(0,0,0);font-family:Menlo;font-size:12pt"><br></span></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">I am giving the ipsec config and logs below.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Is this problem from the strongswan ipsec or configuration issue ?</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">ipsec version:</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><div class="gmail_default"># ipsec --version</div><div class="gmail_default">Linux strongSwan U4.5.2/K3.2.0-4-amd64</div><div class="gmail_default">Institute for Internet Technologies and Applications</div><div class="gmail_default">University of Applied Sciences Rapperswil, Switzerland</div><div class="gmail_default">See 'ipsec --copyright' for copyright information.</div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"> ..... /var/log/auth.log</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default"><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a>: ignoring Vendor ID payload [Vid-Initial-Contact]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a>: ignoring Vendor ID payload [IKE CGA version 1]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[1] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: responding to Main Mode from unknown peer <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[1] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: NAT-Traversal: Result using RFC 3947: peer is NATed</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[1] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: Peer ID is ID_IPV4_ADDR: '10.1.1.237'</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: deleting connection "L2TP-PSK" instance with peer 10.147.52.104 {isakmp=#0/ipsec=#0}</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: sent MR3, ISAKMP SA established</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #4: NAT-Traversal: received 2 NAT-OA. using first, ignoring others</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #4: responding to Quick Mode</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #4: IPsec SA established {ESP=>0x9bf54461 <0xce23acb0 NATOA=10.1.1.237}</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: received Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: received Vendor ID payload [RFC 3947]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [FRAGMENTATION]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [MS-Negotiation Discovery Capable]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [Vid-Initial-Contact]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [IKE CGA version 1]</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[3] 10.147.52.104 #5: responding to Main Mode from unknown peer 10.147.52.104</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[3] 10.147.52.104 #5: NAT-Traversal: Result using RFC 3947: peer is NATed</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[3] 10.147.52.104 #5: Peer ID is ID_IPV4_ADDR: '10.1.1.237'</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] 10.147.52.104 #5: deleting connection "L2TP-PSK" instance with peer 10.147.52.104 {isakmp=#0/ipsec=#0}</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: | NAT-T: new mapping <a href="http://10.147.52.104:500/4500" target="_blank">10.147.52.104:500/4500</a>)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sent MR3, ISAKMP SA established</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #6: NAT-Traversal: received 2 NAT-OA. using first, ignoring others</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #6: responding to Quick Mode</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><b>Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #6: cannot install eroute -- it is in use for "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> </b>#4</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><b>Oct 27 06:47:52 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</b></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:52 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:52 r-49-QA sshd[8410]: Accepted publickey for root from 169.254.0.1 port 46419 ssh2</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:52 r-49-QA sshd[8410]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8410]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8412]: Accepted publickey for root from 169.254.0.1 port 46420 ssh2</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8412]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8412]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8428]: Accepted publickey for root from 169.254.0.1 port 46421 ssh2</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8428]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:53 r-49-QA sshd[8428]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:54 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:54 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:54 r-49-QA sshd[8456]: Accepted publickey for root from 169.254.0.1 port 46422 ssh2</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:54 r-49-QA sshd[8456]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:54 r-49-QA sshd[8456]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:58 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:47:58 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:48:01 r-49-QA CRON[8466]: pam_unix(cron:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:48:01 r-49-QA CRON[8466]: pam_unix(cron:session): session closed for user root</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:48:06 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:48:06 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:48:22 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Oct 27 06:48:22 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div style="color:rgb(51,0,153);font-family:verdana,sans-serif;font-size:small">"</div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">ipsec configuration:</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default"><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">root@r-49-QA:~# cat /etc/ipsec.conf</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"># ipsec.conf - strongSwan IPsec configuration file</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">config setup</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> nat_traversal=yes</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> charonstart=yes</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> plutostart=yes</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">include /etc/ipsec.d/*.conf</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">root@r-49-QA:~#</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">root@r-49-QA:~# cat /etc/ipsec.d/l2tp.conf</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">#ipsec remote access vpn configuration</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">conn L2TP-PSK</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> authby=psk</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> pfs=no</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> rekey=no</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> keyingtries=3</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> keyexchange=ikev1</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> forceencaps=yes</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> leftfirewall=yes</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> leftnexthop=%defaultroute</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # ----------------------------------------------------------</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # The VPN server.</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # Allow incoming connections on the external network interface.</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # If you want to use a different interface or if there is no</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # defaultroute, you can use: left=10.147.52.102</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> left=10.147.52.102</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> leftprotoport=17/1701</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # If you insist on supporting non-updated Windows clients,</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # you can use: leftprotoport=17/%any</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # ----------------------------------------------------------</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # The remote user(s).</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # Allow incoming connections only from this IP address.</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> right=%any</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # If you want to allow multiple connections from any IP address,</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # you can use: right=%any</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> rightprotoport=17/%any</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # ----------------------------------------------------------</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> # Change 'ignore' to 'add' to enable this configuration.</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> #</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> rightsubnetwithin=<a href="http://10.1.2.0/8" target="_blank">10.1.2.0/8</a></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> auto=add</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">#</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"># ipsec status L2TP-PSK</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 "L2TP-PSK": 10.147.52.102[10.147.52.102]:17/1701---10.147.52.1...%any[%any]:17/%any==={<a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a>}; unrouted; eroute owner: #0</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 "L2TP-PSK": newest ISAKMP SA: #0; newest IPsec SA: #0;</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 "L2TP-PSK"[2]: 10.147.52.102:4500[10.147.52.102]:17/1701---10.147.52.1...10.147.52.104:4500[10.1.1.237]:17/1701; erouted; eroute owner: #4</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 "L2TP-PSK"[2]: newest ISAKMP SA: #3; newest IPsec SA: #4;</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 "L2TP-PSK"[10]: 10.147.52.102:4500[10.147.52.102]:17/1701---10.147.52.1...10.147.52.104:4500[10.1.1.237]:17/1701; unrouted; eroute owner: #0</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 "L2TP-PSK"[10]: newest ISAKMP SA: #14; newest IPsec SA: #0;</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 #4: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 3040s; newest IPSEC; eroute owner</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 #4: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> <a href="mailto:esp.9bf54461@10.147.52.104" target="_blank">esp.9bf54461@10.147.52.104</a> (0 bytes) <a href="mailto:esp.ce23acb0@10.147.52.102" target="_blank">esp.ce23acb0@10.147.52.102</a> (980 bytes, 472s ago); transport</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 #3: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 28240s; newest ISAKMP</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000 #14: "L2TP-PSK"[10] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 28772s; newest ISAKMP</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">000</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099">Security Associations:</font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"> no match</font></div><div class="gmail_default"><br></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div><div class="gmail_default"><font face="verdana, sans-serif" color="#330099"><br></font></div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Thanks,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Jayapal</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>