[strongSwan] Windows 7 client problem

[Артем Попов]

Options.xl2tpd: http://paste.org.ru/?iy2pfw

Xl2tpd.conf: http://paste.org.ru/?fc57af

 

ipsec version: Linux strongSwan U4.6.4/K2.6.32-5-xen-amd64

 

I'm using chap v2.

 

Best regards,

Artem Popov.

 

From: John Mara [mailto:jaymara22 at hotmail.com] 
Sent: Wednesday, July 11, 2012 3:59 AM
To: web.tyoma at gmail.com; users at lists.strongswan.org
Subject: RE: [strongSwan] Windows 7 client problem

 

Hi

Paste you options.xl2tpd conf here and also let me know whether you are
using chap or chap v2

  _____  

From:  <mailto:web.tyoma at gmail.com> web.tyoma at gmail.com
To:  <mailto:Users at lists.strongswan.org> Users at lists.strongswan.org
Date: Wed, 11 Jul 2012 00:21:15 +0400
Subject: [strongSwan] Windows 7 client problem

Hi,

 

I'm trying to setup linux ipsec\l2tp server.

When Win7 client connects to server I have error in log:

 

vpn pluto[]: "doublenat"[4] IP:54189 #6: NAT-Traversal: received 2 NAT-OA.
using first, ignoring others

vpn pluto[]: "doublenat"[4] IP:54189 #6: responding to Quick Mode

vpn pluto[]: "doublenat"[4] IP:54189 #5: ignoring informational payload,
type INVALID_HASH_INFORMATION

vpn pluto[]: "doublenat"[4] IP:54189 #5: received Delete SA payload:
deleting ISAKMP State #5

 

Same error appears with PSK and RSA auth.

Win7 client shows "error 789" immediately after Connect button pressed. 

Server is behind the NAT, ports 4500, 500 and 1701 are forwarded. I've tried
clients with public IP and behind NAT with same result.

Is it a bug #108, or I misconfigured something? Is there working example
where client and server are both NATed?

 

My ipsec.conf: http://paste.org.ru/?p6y9js

 

Best regards,

Artem Popov.

 

 


_______________________________________________ Users mailing list
<mailto:Users at lists.strongswan.org> Users at lists.strongswan.org
<https://lists.strongswan.org/mailman/listinfo/users>
https://lists.strongswan.org/mailman/listinfo/users 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120711/30d4279f/attachment.html>