[strongSwan] Problem with windows 7 connecting with strongswan and xl2tpd

CpServiceSPb . cpservicespb at gmail.com
Wed Jun 11 01:16:53 CEST 2014


I have xl2tpd 1.3.6 installed at Ubuntu 12.04 LTS as server.
I had also OpenSwan and OpenSwan +xl2tpd worked for Win XP/7 and Htc
Android phones, but did not work for Sony Android phones (meaning built-in
Android cleint) .
Then I have decided to turn on to xl2tpd+StrongSwan, and installed
U4.5.2/K3.8.0-41-generic version.
I have reached that xl2tpd+StrongSwan works with Win XP, but not for Win 7
and for Sony Android client (did not test for Htc Android) . I talk about
ikev1.
So, how is possible that xl2tpd+strongswan could work with Win XP/7/8 and
with Android built-in client with encryption ?
My confs are below:

*ipsec.conf:*
config setup
   strictcrlpolicy=no
   nat_traversal=yes
   charonstart=yes
   plutostart=yes
   virtual_private=%v4:192.168.0.0/24
   klipsdebug=all
   plutodebug=al

conn %default
     ikelifetime=8h
     keylife=10800
     rekeymargin=3m
     keyingtries=10
     dpdaction=clear
     dpddelay=40
     dpdtimeout=130

conn ikev1
    compress=yes
    forceencaps=yes
    left=external 'white' IP
    leftid=external 'white' IP
    leftprotoport=udp/1701
    right=%any
    rightprotoport=udp/%any
    keyingtries=2
    lifetime=1h
    margintime=15m
    auto=add
    type=transport
    pfs=no
    rekey=no
    authby=psk

ike=3des-sha1-modp1024,3des-sha1-modp2048,aes128-sha1-ecp256,aes256-sha1-ecp384,aes256-sha1-modp2048,null-md5!

    esp=3des-sha1,aes128-sha1,des-sha1,null-md5!
    mobike=no

*ipsec.secrets:*
#include /var/lib/strongswan/ipsec.secrets.inc

external 'white' IP %any : PSK "1234567890"
user : XAUTH "pass"

*xl2tpd.conf:*
[global]
listen-addr = external 'white' IP
port = 1701
auth file = /etc/ppp/chap-secrets
access control = no
rand source = dev

debug avp = yes
debug network = yes
debug state = yes
debug tunnel = yes

*[lns default]*
exclusive = yes
ip range = 192.168.0.200-192.168.0.215
local ip = 192.168.0.100
length bit = yes
refuse chap = yes
refuse pap = yes
require authentication = yes
name = Server
ppp debug = yes
pppoptfile = /etc/xl2tpd/xl2tpd.options;

*xl2tpd.options:*
asyncmap 0
auth
ms-dns 192.168.0.254
ms-wins 192.168.0.254
hide-password
modem
debug
name xl2tpd
idle 1800
mtu 1410
mru 1410
lcp-echo-interval 30
lcp-echo-failure 4
local
lock
logfile /var/log/xl2tpd.log
proxyarp
nodefaultroute
require-mschap
require-mschap-v2
ipparam default
ipcp-accept-local
ipcp-accept-remote
noccp
connect-delay 5000
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140611/e7c6877b/attachment.html>


More information about the Users mailing list