Dear all,
I setup l2tp/ipsec client on Openwrt x86 version 19.07.1 using strongSwan, but I failed at the last step！
Please help me! This is driving me crazy alreday!!!
Thanks again!!!
The connection established successfully as you see:
root@OpenWrt:~# ipsec up L2TP-PSK
sending retransmit 2 of request message ID 0, seq 3
sending packet: from 172.17.17.157[4500] to 122.100.137.249[4500] (100 bytes)
received packet: from 122.100.137.249[4500] to 172.17.17.157[4500] (68 bytes)
parsed ID_PROT response 0 [ ID HASH ]
IKE_SA L2TP-PSK[1] established between 172.17.17.157[172.17.17.157]...122.100.137.249[192.168.1.107]
scheduling reauthentication in 28538s
maximum IKE_SA lifetime 28718s
generating QUICK_MODE request 506475714 [ HASH SA No ID ID NAT-OA NAT-OA ]
sending packet: from 172.17.17.157[4500] to 122.100.137.249[4500] (188 bytes)
received packet: from 122.100.137.249[4500] to 172.17.17.157[4500] (172 bytes)
parsed QUICK_MODE response 506475714 [ HASH SA No ID ID NAT-OA NAT-OA ]
selected proposal: ESP:3DES_CBC/HMAC_SHA1_96/NO_EXT_SEQ
CHILD_SA L2TP-PSK{1} established with SPIs cae1f9e8_i 33dc7496_o and TS 172.17.17.157/32[udp/l2f] === 122.100.137.249/32[udp/l2f]
connection 'L2TP-PSK' established successfully
But I check the log is this "I couldn't find any suitable secret (password)"
Fri Mar 27 00:36:30 2020 daemon.notice netifd: Interface 'client' is setting up now
Fri Mar 27 00:36:30 2020 daemon.notice xl2tpd[13025]: Connecting to host macau.dyndns.tv, port 1701
Fri Mar 27 00:36:31 2020 daemon.notice xl2tpd[13025]: Connection established to 122.100.137.249, 1701. Local: 36290, Remote: 29254 (ref=0/0).
Fri Mar 27 00:36:31 2020 daemon.notice xl2tpd[13025]: Calling on tunnel 36290
Fri Mar 27 00:36:31 2020 daemon.notice xl2tpd[13025]: Call established with 122.100.137.249, Local: 42420, Remote: 60881, Serial: 1 (ref=0/0)
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: start_pppd: I'm running:
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "/usr/sbin/pppd"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "plugin"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "pppol2tp.so"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "pppol2tp"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "8"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "passive"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "nodetach"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: ":"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "file"
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: "/tmp/l2tp/options.client"
Fri Mar 27 00:36:31 2020 daemon.info pppd[13278]: Plugin pppol2tp.so loaded.
Fri Mar 27 00:36:31 2020 daemon.err pppd[13278]: The remote system is required to authenticate itself
Fri Mar 27 00:36:31 2020 daemon.err pppd[13278]: but I couldn't find any suitable secret (password) for it to use to do so.
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: child_handler : pppd exited for call 60881 with code 1
Fri Mar 27 00:36:31 2020 daemon.info xl2tpd[13025]: call_close: Call 42420 to 122.100.137.249 disconnected
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: write_packet: tty is not open yet.
Fri Mar 27 00:36:31 2020 daemon.info xl2tpd[13025]: control_finish: Connection closed to 122.100.137.249, port 1701 (), Local: 36290, Remote: 29254
Fri Mar 27 00:36:31 2020 daemon.debug xl2tpd[13025]: Terminating pppd: sending TERM signal to pid 13278
Fri Mar 27 00:36:33 2020 daemon.info : 09[NET] received packet: from 122.100.137.249[4500] to 172.17.17.157[4500] (84 bytes)
Fri Mar 27 00:36:33 2020 daemon.info : 09[ENC] parsed INFORMATIONAL_V1 request 3653063745 [ HASH D ]
Fri Mar 27 00:36:33 2020 daemon.info : 09[IKE] received DELETE for IKE_SA L2TP-PSK[1]
Fri Mar 27 00:36:33 2020 daemon.info : 09[IKE] deleting IKE_SA L2TP-PSK[1] between 172.17.17.157[172.17.17.157]...122.100.137.249[192.168.1.107]
Fri Mar 27 00:36:33 2020 authpriv.info : 09[IKE] deleting IKE_SA L2TP-PSK[1] between 172.17.17.157[172.17.17.157]...122.100.137.249[192.168.1.107]
Fri Mar 27 00:36:36 2020 daemon.notice netifd: Interface 'client' is now down
Fri Mar 27 00:36:36 2020 daemon.notice netifd: Interface 'client' is setting up now
Fri Mar 27 00:36:36 2020 daemon.notice xl2tpd[13025]: Connecting to host macau.dyndns.tv, port 1701
Fri Mar 27 00:36:42 2020 daemon.info xl2tpd[13025]: Disconnecting from 122.100.137.249, Local: 37865, Remote: 0
Fri Mar 27 00:36:42 2020 daemon.info xl2tpd[13025]: Connection 0 closed to 122.100.137.249, port 1701 (Goodbye!)
Fri Mar 27 00:36:42 2020 daemon.notice netifd: Interface 'client' is now down
I'm sure that user name and passward is correct, for both of /tmp/l2tp/options.client and /etc/ppp/options.l2tpd.client
/tmp/l2tp/options.client
usepeerdns
nodefaultroute
ipparam "client"
ifname "l2tp-client"
ip-up-script /lib/netifd/ppp-up
ipv6-up-script /lib/netifd/ppp-up
ip-down-script /lib/netifd/ppp-down
ipv6-down-script /lib/netifd/ppp-down
# Don't wait for LCP term responses; exit immediately when killed.
lcp-max-terminate 0
user "xxxxxx" password "xxxxxx"
mtu 1400 mru 1400
noccp refuse-eap require-chap debug
/etc/ppp/options.l2tpd.client
ipcp-accept-local
ipcp-accept-remote
require-mschap-v2
noccp
noauth
idle 1800
mtu 1400
mru 1400
defaultroute
replacedefaultroute
usepeerdns
debug
connect-delay 5000
name "xxxxxx"
password "xxxxxx"
lcp-echo-interval 20
lcp-echo-failure 5