I have been trying to configure openswan and xl2tpd to access a L2tp/ipsec vpn connection and have run into some problems. I've been following the guide here:
https://wiki.archlinux.org/index.php...N_client_setup
When I run the command "ipsec auto --add l2tp-psk" I receive the following error.
Code:
richard@richard-X220:~$ ipsec auto --add l2tp-psk
Segmentation fault (core dumped)
After the program fails the error reporting window appears and wants me to submitt an error or bug. I have no clue how to fix this other than compile the lastest source. The version from the repos is 2.6.37.
My /etc/ipsec.conf file is below
Code:
# This configuration file is for the zxyel vpn located at 75.137.113.238. Last updated 07/17/2013
version 2.0
config setup
nat_traversal=yes
protostack=netkey
virtual_private=%v4:10.0.0.0/8,%v4:192.168.1.0/50,%v4:172.16.0.0/12
conn l2tp-psk
authby=secret
auto=add
rekey=yes
type=transport
left=%defaultroute
leftprotoport=17/1701
# The remote user.
right=75.137.113.238
rightprotoport=17/%any
When I run sudo ipsec verify to check if ipsec installed correctly I get the following results.
Code:
richard@richard-X220:~$ sudo ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.37/K3.2.0-49-generic (netkey)
Checking for IPsec support in kernel [OK]
SAref kernel support [N/A]
NETKEY: Testing XFRM related proc values [FAILED]
Please disable /proc/sys/net/ipv4/conf/*/send_redirects
or NETKEY will cause the sending of bogus ICMP redirects!
[OK]
[OK]
Checking that pluto is running [OK]
Pluto listening for IKE on udp 500 [OK]
Pluto listening for NAT-T on udp 4500 [OK]
Two or more interfaces found, checking IP forwarding [FAILED]
Checking for 'ip' command [OK]
Checking /bin/sh is not /bin/dash [WARNING]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
Anyone have experience with openswan? I'm running ubuntu 12.04.
