xelerance / Openswan

Openswan
Other
852 stars 214 forks source link

ipsec client not working #345

Open bitpaydotir opened 5 years ago

bitpaydotir commented 5 years ago

my ipsec.conf is:

config setup
     virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
     nat_traversal=yes
     protostack=netkey
conn L2TP-PSK
     authby=secret
     pfs=no
     auto=add
     keyingtries=3
     dpddelay=30
     dpdtimeout=120
     dpdaction=clear
     rekey=yes
     ikelifetime=8h
     keylife=1h
     type=transport
# Replace %local below with your local IP address (private, behind NAT IP is okay as $
     left=85.37.52.12
     leftprotoport=17/1701
# Replace IP address with your VPN server's IP
     right=125.17.12.6
     rightprotoport=17/1701

when i run ipsec auto --up L2TP-PSK

output is:

002 "L2TP-PSK" #1: initiating Main Mode
104 "L2TP-PSK" #1: STATE_MAIN_I1: initiate
010 "L2TP-PSK" #1: STATE_MAIN_I1: retransmission; will wait 0.5 seconds for response
010 "L2TP-PSK" #1: STATE_MAIN_I1: retransmission; will wait 1 seconds for response

Of course I got a PSK that i entered in the file below /etc/ipsec.secrets

85.37.52.12 125.17.12.6 : PSK "psk_key"

please help

AnatoliChe commented 5 years ago

It's like to problem with your network (routing/firewall). Can you see packets from 125.17.12.6 on the correct interface?