Hi, someone can help me with strongswan+xl2tp? I can't use racoon because there aren't some package (like zlib, kmod-cbc and other) for my openwrt version (10.03.1 final on tplink wr1043nd).
When i tray to connect from my iphone to my openwrt router (ip 192.168.1.254) popup says that isn't possible to connect to server.
This is my config files:
<ipsec.conf>
config setup
# plutodebug=all
# crlcheckinterval=600
# strictcrlpolicy=yes
# cachecrls=yes
nat_traversal=yes
charonstart=no
plutostart=yes
virtual_private=%v4:0.0.0.0/0,%v4:!192.168.1.0/24 #192.168.1.0/24 is my lan
conn L2TP-PSK
authby=secret
pfs=no
rekey=no
keyingtries=3
type=transport
left=%defaultroute
leftnexthop=%defaultroute
leftprotoport=17/1701
right=%any
rightsubnet=vhost:%no,%priv
rightprotoport=17/%any
auto=add
<ipsec.secret>
%any %any : PSK "superpassword"
<xl2tpd.conf>
[global]
port = 1701
;auth file = /etc/xl2tpd/xl2tp-secrets
access control = no
ipsec saref = yes
[lns default]
exclusive = yes
ip range = 192.168.1.202-192.168.1.210 (out of the dhcp range, right? )
local ip = 192.168.1.254 (openwrt himself ip)
;lac = 10.0.1.2
;hidden bit = no
length bit = yes
name = some-name
;refuse authentication = yes
ppp debug = yes
require authentication = yes
unix authentication = no
require chap = yes
refuse pap = yes
pppoptfile = /etc/ppp/options.xl2tpd
<options.xl2tp>
lock
auth
debug
dump
noccp
novj
novjccomp
nopcomp
noaccomp
require-mschap
require-mschap-v2
ms-dns 192.168.1.254 (my openwrt ip)
lcp-echo-interval 120
lcp-echo-failure 10
idle 1800
connect-delay 5000
nodefaultroute
noipdefault
proxyarp
mtu 1400
mru 1400
<chap-secrets>
#USERNAME PROVIDER PASSWORD IPADDRESS
user * "password" 192.168.1.202 #ip out the dhcp range
* password "password" 192.168.1.202 #ip out the dhcp range
<firewall.conf>
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'IPSec IKE'
option 'src' 'wan'
option 'proto' 'udp'
option 'dest_port' '500'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'IPSec ESP'
option 'src' 'wan'
option 'proto' 'esp'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'IPsec NAT-T'
option 'src' 'wan'
option 'proto' 'udp'
option 'dest_port' '4500'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'L2TP ESP'
option 'src' 'wan'
option 'proto' 'udp'
option 'dest_port' '1701'
option 'extra' '-m policy --strict --dir in --pol ipsec --proto esp'
<firewall.user>
iptables -A forwarding_rule -o ppp0 -j ACCEPT
iptables -A forwarding_rule -i ppp0 -j ACCEPT
what's wrong? seems that xl2tp doesn't answer to strongswan call 
After that, I tried to connect from the internet. After some testing and failing, I found that this log was the cause of the problem: