Page 1 of 1
Re: can´t create valid vpn session over L2TP
Posted: Thu Dec 01, 2016 8:27 am
by AdrianH
I faced a similar problem a few months ago when I was trying to configure Ivacy VPN on my Xbox. Chances are that you haven't configured your devices. There should be detailed instructions on the site on how to configure and set up different devices. Good luck!
Re: can´t create valid vpn session over L2TP
Posted: Thu Dec 15, 2016 7:20 am
by thisjun
Could you show the server log?
Re: can´t create valid vpn session over L2TP
Posted: Thu Dec 15, 2016 12:10 pm
by herrficus
Hello!
well I run into the same problem. L2TP connections do not work for me. They did work in the past. Native Client is working. OpenVPN is working.
I see on the server side :
Dec 15 12:03:12 localhost [cerberos/VPN] (2016-12-15 12:03:12.019) <SERVER_LOG>: IPsec Client 1 (XXXXXXXX:25277 -> 192.168.10.10:500): A new IPsec client is created.
Dec 15 12:03:12 localhost [cerberos/VPN] (2016-12-15 12:03:12.020) <SERVER_LOG>: IPsec IKE Session (IKE SA) 1 (Client: 1) (XXXXXXX:25277 -> 192.168.10.10:500): A new IKE SA (Main Mode) is created. Initiator Cookie: 0x241C271252EA548, Responder Cookie: 0xB64FAD4F51CBF2BF, DH Group: MODP 1536 (Group 5), Hash Algorithm: SHA-1, Cipher Algorithm: AES-CBC, Cipher Key Size: 256 bits, Lifetime: 4294967295 Kbytes or 3600 seconds
Dec 15 12:03:22 localhost [cerberos/VPN] (2016-12-15 12:03:22.048) <SERVER_LOG>: IPsec IKE Session (IKE SA) 1 (Client: 1) (XXXXXXXX:25277 -> 192.168.10.10:500): This IKE SA is deleted.
Dec 15 12:03:22 localhost [cerberos/VPN] (2016-12-15 12:03:22.048) <SERVER_LOG>: IPsec Client 1 (XXXXXXXX:25277 -> 192.168.10.10:500): This IPsec Client is deleted.
The connection then times out on the OSX side. It sets up the IKE SA and shortly after that IKE SA is deleted. After that the IPsec Client goes down -
I' out of ideas what to do. Is that some kind of the SSL fallout from this year? Is it because of SHA-1 hash algo? Maybe someone can point me into the right direction.
Ben
Re: can´t create valid vpn session over L2TP
Posted: Fri Dec 16, 2016 11:38 pm
by moatazelmasry
Are the ports 500, 4500 and 1701 open?
Re: can´t create valid vpn session over L2TP
Posted: Wed Dec 21, 2016 2:56 pm
by herrficus
my mistake. One port was wrongly typed as TCP - not UDP. Now it works on osx and iOS.
Thank you.