search

ftao / vpn-deploy-playbook

A Collection of Ansible Playbook for deploy vpn services
GNU General Public License v3.0
918 stars 159 forks source link

doesnt work with android #31

Open gilankpam opened 9 years ago

gilankpam commented 9 years ago

this is the log

Dec 24 17:33:30 install pluto[27122]: packet from 180.254.77.9:500: received Vendor ID payload [RFC 3947] method set to=115 
Dec 24 17:33:30 install pluto[27122]: packet from 180.254.77.9:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 115
Dec 24 17:33:30 install pluto[27122]: packet from 180.254.77.9:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 115
Dec 24 17:33:30 install pluto[27122]: packet from 180.254.77.9:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Dec 24 17:33:30 install pluto[27122]: packet from 180.254.77.9:500: ignoring Vendor ID payload [FRAGMENTATION 80000000]
Dec 24 17:33:30 install pluto[27122]: packet from 180.254.77.9:500: received Vendor ID payload [Dead Peer Detection]
Dec 24 17:33:30 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: responding to Main Mode from unknown peer 180.254.77.9
Dec 24 17:33:30 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Dec 24 17:33:30 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: STATE_MAIN_R1: sent MR1, expecting MI2
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): peer is NATed
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: STATE_MAIN_R2: sent MR2, expecting MI3
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.120'
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: new NAT mapping for #3, was 180.254.77.9:500, now 180.254.77.9:4500
Dec 24 17:33:31 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}
Dec 24 17:33:32 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Dec 24 17:33:32 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: received and ignored informational message
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #3: the peer proposed: 108.61.219.60/32:17/1701 -> 192.168.1.120/32:17/0
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: responding to Quick Mode proposal {msgid:ba92fc8d}
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4:     us: 108.61.219.60<108.61.219.60>:17/1701
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4:   them: 180.254.77.9[192.168.1.120]:17/0===192.168.1.120/32
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: keeping refhim=4294901761 during rekey
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: netlink_raw_eroute: WARNING: that_client port 0 and that_host port 4500 don't match. Using that_client port.
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Dec 24 17:33:33 install pluto[27122]: "L2TP-PSK-NAT"[2] 180.254.77.9 #4: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x0ade632f <0xa7a60ea4 xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=180.254.77.9:4500 DPD=none}
ftao commented 9 years ago

L2TP ? which playbook do you run ?

ftao commented 9 years ago

Please try using this guide to setup l2tp sever . setup l2tp using strongswan & xl2tpd