Guide: Openswan, XL2TP and PPP on Ubuntu Maverick for iPhone VPN Connection

[michel176]

followed your guide exactly and I keep getting this error:

Jul 13 16:51:24 ubuntu-server pluto[11098]: ERROR: asynchronous network error report on br0 (sport=4500) for message to 192.168.1.1 port 4500, complainant 192.168.1.1: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]

the ports are set-up in the router and ipsec verify does not give errors

[atca]

This may also be of help Openswan, xl2tp and PPP in detail

[osborni]

Hello - got this setup and working properly... (HUGE THANKS!!!!) but.....

ipsec isn't starting on a reboot.

Verified by rebooting, then running:

sudo ipsec verify

and finding an incomplete log as well as failing to connect a client.

Then running:

sudo /etc/init.d/ipsec restart

and getting a complete ipsec verify log and being able to connect with a client.

Any suggestions as to what to do to get ipsec to start on reboot?

[atca]

Hello - got this setup and working properly... (HUGE THANKS!!!!) but.....

ipsec isn't starting on a reboot.

Verified by rebooting, then running:



and finding an incomplete log as well as failing to connect a client.

Then running:



and getting a complete ipsec verify log and being able to connect with a client.

Any suggestions as to what to do to get ipsec to start on reboot?

See section 12 of this guide...
http://confoundedtech.blogspot.com/2...-vpn-with.html

sudo vi /etc/rc.local

Add:

/etc/init.d/ipsec start

[osborni]

Yes, thanks, basically what I ended up doing. Of course, found it a day or two after my post.

Next issue is that it doesn't seam to always pick up the connection. Seams to work better after a fresh reboot, but not too sure about that. It's behind a dd-wrt router and it will work about 50/50....

[atca]

Yes, thanks, basically what I ended up doing. Of course, found it a day or two after my post.

Next issue is that it doesn't seam to always pick up the connection. Seams to work better after a fresh reboot, but not too sure about that. It's behind a dd-wrt router and it will work about 50/50....

that may be DPD dead peer detection with the iOS.

[osborni]

Hmmm. I have a DD-wrt router up as well. Works, but not as robust or as fast on browsing the web as the ubuntu box ( when it works ).... played with MTU on the router, but that didn't make it 100%, just 98% working on web pages.

this was the code that the DD-WRT wiki asks to put into the router:

#!/bin/sh
echo "nopcomp" >> /tmp/pptpd/options.pptpd
echo "noaccomp" >> /tmp/pptpd/options.pptpd
kill `ps | grep pptp | cut -d ' ' -f 1`
pptpd -c /tmp/pptpd/pptpd.conf -o /tmp/pptpd/options.pptpd

I suspect that it's DPD as well, but I'm not knowledgeable enough to know what to do with it in linux.

Ideas? Or in there another workaround for iOS clients?

Change the timeouts in the l2tp-psk.conf file?

[atca]

Hmmm. I have a DD-wrt router up as well. Works, but not as robust or as fast on browsing the web as the ubuntu box ( when it works ).... played with MTU on the router, but that didn't make it 100%, just 98% working on web pages.

this was the code that the DD-WRT wiki asks to put into the router:


I suspect that it's DPD as well, but I'm not knowledgeable enough to know what to do with it in linux.

Ideas? Or in there another workaround for iOS clients?

Change the timeouts in the l2tp-psk.conf file?

See here for my DPD settings:

http://confoundedtech.blogspot.com/2...ipsec-vpn.html

DD-WRT I use too, and should that just be forwarding the packets. The browsing will also be constrained by your VPN's upload speed which is bound to be slower than the download.

EDIT: Misread not sure why the DDWRT box is slower than the Ubuntu VPN - maybe the difference in the VPN suites is the cause. I only use DD-WRT for router to router IPSec.

[osborni]

Ok, i'll play with the dpd settings. They where already in there.

What units are they in? Seconds? Minutes?

[atca]

5 seconds I believe