racoon l2tp windows xp

[Verwijderd]

Ik heb de volgende setup in mijn testomgeving:

windows client

ipaddress 192.168.0.80/24

|

|

|

linux nat router/firewall

external ipaddress 192.168.0.52/24

internal ipaddress 10.0.0.2/8

all traffic from 192.168.0.52 is dnatted to 10.0.0.1 (vpn server)

|

|

vpn server

ipaddress 10.0.0.1

de l2tpd server is geinstalleerd en werkt. Certificates aangemaakt enz.

Als ik de windows xp client op het interne netwerk zet dan kan ik zo een ipsec l2tp sessie opstarten, behalve achter nat.

Dit is mij racoon.conf:

Code:

timer {

natt_keepalive 10sec;

}

listen {

isakmp 10.0.0.1 [500];

isakmp_natt 10.0.0.1 [4500];

}

remote anonymous {

exchange_mode main;

nat_traversal on;

generate_policy on;

passive on;

certificate_type x509 "dsfw_cert.pem" "dsfw_key.pem";

my_identifier asn1dn;

peers_identifier asn1dn;

proposal {

encryption_algorithm 3des;

hash_algorithm md5;

authentication_method rsasig;

dh_group modp1024;

}

}

sainfo anonymous {

#pfs_group modp1024;

encryption_algorithm 3des;

authentication_algorithm hmac_md5;

compression_algorithm deflate;

}

Dit is mijn log:

Aug 13 11:38:33 dsfw racoon: INFO: IPsec-SA established: ESP/Transport 192.168.0.80->10.0.0.1 spi=153012816(0x91eca50)

Aug 13 11:38:33 dsfw racoon: INFO: IPsec-SA established: ESP/Transport 10.0.0.1->192.168.0.80 spi=3857346556(0xe5ea6ffc)

Aug 13 11:38:33 dsfw racoon: ERROR: such policy does not already exist: 192.168.0.80/32[0] 192.168.0.52/32[1701] proto=udp dir=in

Aug 13 11:38:33 dsfw racoon: ERROR: such policy does not already exist: 192.168.0.52/32[1701] 192.168.0.80/32[0] proto=udp dir=out

Aug 13 11:38:39 dsfw l2tpd[3499]: call_close : Connection 14 closed to 192.168.0.80, port 1701 (Timeout)

Aug 13 11:38:53 dsfw l2tpd[3499]: call_close : Connection 14 closed to 192.168.0.80, port 1701 (Timeout)

Aug 13 11:39:04 dsfw racoon: INFO: purged IPsec-SA proto_id=ESP spi=3857346556.

Aug 13 11:39:04 dsfw racoon: INFO: purged ISAKMP-SA proto_id=ISAKMP spi=7c391eecc1e86abc:18e33e3546883518.

Aug 13 11:39:05 dsfw racoon: INFO: ISAKMP-SA deleted 10.0.0.1[4500]-192.168.0.80[4500] spi:7c391eecc1e86abc:18e33e3546883518

Aug 13 11:39:05 dsfw racoon: INFO: KA remove: 10.0.0.1[4500]->192.168.0.80[4500]

Iemand een idee?

[Zwerver]

Nee. Want ten eerste geef je zelf niet aan wat het probleem is, ten tweede weet jij als geen ander dat dit niet de manier van werken hier is op GoT