<!DOCTYPE html><html><head><title></title><style type="text/css">#fastmail-quoted p{margin-top:0px;margin-bottom:0px;}

p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>I think you got the proto's backwards which explain the "no acceptable traffic selectors found".<br></div><div><br></div><div><span style="background-color:rgb(255, 255, 255)" class="highlight"><span style="color:rgb(0, 0, 0)" class="colour"><span style="font-family:Calibri, Helvetica, sans-serif" class="font"><span style="font-size:16px" class="size">conn myvpn<br></span></span></span></span></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  type=transport<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  authby=secret<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  pfs=no<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  rekey=no<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  keyingtries=1<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  left=%defaultroute<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  leftprotoport=udp/l2tp<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  right=<vpn-server-ip><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  rightprotoport=udp/%any<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  auto=add<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  ike=3des-sha1-modp1536!<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  esp=3des-sha1!<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  keyexchange=ikev1<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">L2TP uses port 1701 *on the server* - but on the client the port can be anything<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">Try this instead - on the client:<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  leftprotoport=udp/%any<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><div>  rightprotoport=udp/l2tp<br></div></div></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">On the server, assuming it has "left=%defaultroute" or "left=<vpn server ip>" you will want<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  leftprotoport=udp/l2tp<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">  rightprotoport=udp/%any<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">In other words, for the server:<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">left = server IP, UDP, port 1701<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">right = any client IP, UDP, any port<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">For the client:<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">left = client IP, UDP, any port<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">right = server IP, UDP, 1701<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">*swan will switch left / right as appropriate - but I don't think it can sort out the proto's automatically (don't see how it would know to do that).<br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;"><br></div><div style="color:rgb(0, 0, 0);font-family:Calibri, Helvetica, sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;orphans:2;text-align:start;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);text-decoration-style:initial;text-decoration-color:initial;">-- K<br></div><div><br></div><div id="sig24956113"><div class="signature">--<br></div><div class="signature">Kostya Vasilyev<br></div><div class="signature">kman@fastmail.com<br></div><div class="signature"><br></div></div><div><br></div><div><br></div><div>On Mon, Apr 8, 2019, at 3:08 PM, A P wrote:<br></div><blockquote type="cite" id="fastmail-quoted"><div style="font-family:Calibri, Helvetica, sans-serif;font-size:12pt;color:rgb(0, 0, 0);"><span>Ok, I have enabled all the logs to level 4. Here is what I get around the error. Is this any more helpful? Perhaps, I need to set left/rightsubmask? Is the problem that it used my public ip rather than router internal? I don't think there is anything
 else missing from config (I don't have access to server log unfortunately)</span><br></div><div style="font-family:Calibri, Helvetica, sans-serif;font-size:12pt;color:rgb(0, 0, 0);"><span></span><br></div><div style="font-family:Calibri, Helvetica, sans-serif;font-size:12pt;color:rgb(0, 0, 0);"><span></span><br></div><div style="font-family:Calibri, Helvetica, sans-serif;font-size:12pt;color:rgb(0, 0, 0);"><span><b>LOG</b></span><br></div><div style="font-family:Calibri, Helvetica, sans-serif;font-size:12pt;color:rgb(0, 0, 0);"><div><span>Apr 08 21:19:45 cosmic charon[3199]: 04[IKE] changing received traffic selectors <my-public-ip>/32[udp]=== <vpn-server-ip>/32[udp/l2f] due to NAT<br> </span> </div><div>Apr 08 21:19:45 cosmic charon[3199]: 04[CHD] CHILD_SA myvpn{1} state change: CREATED => INSTALLING<br></div><div>Apr 08 21:19:45 cosmic charon[3199]: 04[IKE] no acceptable traffic selectors found<br></div><div>Apr 08 21:19:45 cosmic charon[3199]: 04[IKE] queueing INFORMATIONAL task<br></div><div>Apr 08 21:19:45 cosmic charon[3199]: 04[CHD] CHILD_SA myvpn{1} state change: INSTALLING => DESTROYING<br></div><div>Apr 08 21:19:45 cosmic charon[3199]: 04[KNL] deleting SAD entry with SPI cb524fd7<br></div><div><br></div><div><br></div><div><i>later there's also stuff like</i><br></div><div><br></div><div><div><span>Apr 08 21:47:49 cosmic ipsec[3798]: 03[IKE] received retransmit of response with ID 2810990975, but next request already sent<br> </span> </div><div><br></div><div><span></span><br></div></div><div><br></div><div><b>CONFIGS</b><br></div><div><span></span><br></div><div><span><i>ipsec.conf (I don't think the others really mater at this point)</i></span><br></div><div><span></span><br></div><div><div><span>conn myvpn<br> </span> </div><div>  type=transport<br></div><div>  authby=secret<br></div><div>  pfs=no<br></div><div>  rekey=no<br></div><div>  keyingtries=1<br></div><div>  left=%defaultroute<br></div><div>  leftprotoport=udp/l2tp<br></div><div>  right=<vpn-server-ip><br></div><div>  rightprotoport=udp/%any<br></div><div>  auto=add<br></div><div>  ike=3des-sha1-modp1536!<br></div><div>  esp=3des-sha1!<br></div><div>  keyexchange=ikev1<br></div><div><br></div><div><br></div><div><br></div><div><div><span><i>xl2tpd.conf (tried with lac section as well)</i><br> </span> </div><div><br></div></div><div><span></span><span>[global]<br> </span> </div><div>port = 1701<br></div><div>access control = no<br></div><div><br></div><div>[lns default]<br></div><div>local ip = 192.168.1.2<br></div><div>require authentication = yes<br></div><div>name = myvpn<br></div><div><span>pppoptfile = /etc/ppp/options.l2tpd</span><br></div></div><div><span></span><br></div><div><span></span><br></div><div><span></span><br></div><div><i><span>options.l2tp (tried many others, with username/password, too)</span></i><br></div><div><i><span></span></i><br></div><div><span><div><span>noccp<br> </span> </div><div>auth<br></div><div>crtscts<br></div><div>mtu 1410<br></div><div>mru 1410<br></div><div>nodefaultroute<br></div><div>lock<br></div><div>proxyarp<br></div><div>silent<br></div><div><br></div><div><span></span><br></div></span></div><div><span>also there a secrets file obviously</span><br></div><div><span></span><br></div></div><div id="fastmail-quoted-appendonsend"><br></div><div><hr style="display:inline-block;width:98%;"><br></div></blockquote><div><br></div></body></html>