[strongSwan] Strongswan issues with Windows 7 clients

[John Mara]

Hi Mos,
I found a fix for this.
http://blog.davidvassallo.me/2011/05/24/windows-l2tp-split-tunnelling-using-cmak/ 
On Mac OSX under advanced settings there is an option to untick. this works for me!

From: taekwondoaqr at gmail.com
Date: Wed, 11 Jul 2012 13:56:22 +0430
Subject: Re: [strongSwan] Strongswan issues with Windows 7 clients
To: jaymara22 at hotmail.com

I've this problem too and have to disconnect from vpn when I want to use the internal network.

Mos

On Mon, Jul 9, 2012 at 7:01 PM, John Mara <jaymara22 at hotmail.com> wrote:






Awesome Mos. It works!!
 One more thing. once connected all traffic in client goes through the tunnel. However in my setup I have a file server behind the VPN gateway (samba - 192.168.4.14). I only want traffic destined to 192.168.4.14 sent via the tunnel. do you know how it can be done. I think you need to add a route on top of the ppp connection ? 


thanks man!
From: taekwondoaqr at gmail.com
Date: Mon, 9 Jul 2012 06:37:26 +0430
Subject: Re: [strongSwan] Strongswan issues with Windows 7 clients


To: jaymara22 at hotmail.com

Hello John,

VPN Properties -> Security ->
Type : L2TP/IPSec
Advanced settings -> Set the preshared key


Allow these protocols : mschap-v2

This is working fine for me on win 7.




On Mon, Jul 9, 2012 at 4:42 AM, John Mara <jaymara22 at hotmail.com> wrote:








Hi Mos,Thanks for the info. It asks for a server certificate when i click on the connect button on Windows 7

From: taekwondoaqr at gmail.com




Date: Sun, 8 Jul 2012 22:14:52 +0430
Subject: Re: [strongSwan] Strongswan issues with Windows 7 clients
To: jaymara22 at hotmail.com



Hello,

try the following conn  :

conn L2TP-VPN
       authby=psk
       compress=no
       keyexchange=ikev1
       pfs=no
       rekey=no
       type=transport
       left=203.143.22.43






       leftnexthop=203.143.22.43
       leftprotoport=17/1701
       right=%any
       rightprotoport=17/%any
       rightsubnetwithin=0.0.0.0/0
       auto=start





Regards,


Mos

On Sun, Jul 8, 2012 at 9:07 PM, John Mara <jaymara22 at hotmail.com> wrote:










Hi All,
My ipsec.conf is as below and using strongSwan 4.5.0 IPsec and Xl2tpd on ubuntu 10.04
config setup        nat_traversal=yes        plutostart=yes





        charonstart=yes
conn L2TP-VPN        type=transport        keyexchange=ikev1        keyingtries=3        authby=psk        pfs=no





        rekey=no        left=203.143.22.43        leftnexthop=%defaultroute        leftprotoport=17/1701        right=%any        rightprotoport=17/%any





        rightsubnetwithin=0.0.0.0/0        auto=add
My issue is that my Windows XP works fine with this setup but I cannot get Windows 7 or Apple iPhone to work with this setup. Please let me know what i did wrong.






Thanks
Jay 		 	   		  

_______________________________________________

Users mailing list

Users at lists.strongswan.org

https://lists.strongswan.org/mailman/listinfo/users

 		 	   		  

 		 	   		  

 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120712/8407ff01/attachment.html>