[strongSwan] Windows 7 client problem

Артем Попов web.tyoma at gmail.com
Wed Jul 11 08:20:03 CEST 2012

Options.xl2tpd: http://paste.org.ru/?iy2pfw

Xl2tpd.conf: http://paste.org.ru/?fc57af


ipsec version: Linux strongSwan U4.6.4/K2.6.32-5-xen-amd64


I'm using chap v2.


Best regards,

Artem Popov.


From: John Mara [mailto:jaymara22 at hotmail.com] 
Sent: Wednesday, July 11, 2012 3:59 AM
To: web.tyoma at gmail.com; users at lists.strongswan.org
Subject: RE: [strongSwan] Windows 7 client problem



Paste you options.xl2tpd conf here and also let me know whether you are
using chap or chap v2


From:  <mailto:web.tyoma at gmail.com> web.tyoma at gmail.com
To:  <mailto:Users at lists.strongswan.org> Users at lists.strongswan.org
Date: Wed, 11 Jul 2012 00:21:15 +0400
Subject: [strongSwan] Windows 7 client problem



I'm trying to setup linux ipsec\l2tp server.

When Win7 client connects to server I have error in log:


vpn pluto[]: "doublenat"[4] IP:54189 #6: NAT-Traversal: received 2 NAT-OA.
using first, ignoring others

vpn pluto[]: "doublenat"[4] IP:54189 #6: responding to Quick Mode

vpn pluto[]: "doublenat"[4] IP:54189 #5: ignoring informational payload,

vpn pluto[]: "doublenat"[4] IP:54189 #5: received Delete SA payload:
deleting ISAKMP State #5


Same error appears with PSK and RSA auth.

Win7 client shows "error 789" immediately after Connect button pressed. 

Server is behind the NAT, ports 4500, 500 and 1701 are forwarded. I've tried
clients with public IP and behind NAT with same result.

Is it a bug #108, or I misconfigured something? Is there working example
where client and server are both NATed?


My ipsec.conf: http://paste.org.ru/?p6y9js


Best regards,

Artem Popov.



_______________________________________________ Users mailing list
<mailto:Users at lists.strongswan.org> Users at lists.strongswan.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120711/30d4279f/attachment.html>

More information about the Users mailing list