LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 04-16-2012, 09:07 PM   #1
lesca
Member
 
Registered: Sep 2010
Posts: 58

Rep: Reputation: 0
ubuntu 11.04 + openswan U2.6.28 = kernel crash?


Hello,

Please help me figure out how this happens...

1. Environment:
Ubuntu 11.04 Server + Linux Kernel 3.0.0-12-generic-pae + OpenSwan 2.6.28 + xl2tpd-1.2.8

Event:
When Win7 or iPhone try to connect to server over L2TP, the server fails. What I got is like this:
http://lesca.me/blog/wp-content/uplo...2/04/crash.jpg

Note:
The win7 client is in the same LAN.

2. ipsec.conf (almost the same like /etc/ipsec.d/examples/l2tp-psk.conf )
Code:
config setup
    nat_traversal=yes
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!192.168.1.0/24,%v4:!192.168.0.0/24
    oe=off
    protostack=netkey

conn L2TP-PSK-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    rekey=no
    ikelifetime=8h
    keylife=1h
    type=transport
    left=192.168.1.120
    leftprotoport=17/1701
    right=%any
    rightprotoport=17/%any
    dpddelay=30
    dpdtimeout=120
    dpdaction=clear
3. /etc/xl2tpd/xl2tpd.conf
Code:
[global]
ipsec saref = no

[lns default]
local ip = 10.10.20.1
ip range = 10.10.20.100-10.10.20.254
require chap = yes
refuse pap = yes
require authentication = yes
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes
4. /etc/ppp/options.xl2tpd
Code:
refuse-mschap-v2
refuse-mschap
ms-dns 8.8.8.8
asyncmap 0
auth
lock
hide-password
local
#debug
name l2tpd
proxyarp
lcp-echo-interval 30
lcp-echo-failure 4
 
Old 04-18-2012, 01:39 AM   #2
lesca
Member
 
Registered: Sep 2010
Posts: 58

Original Poster
Rep: Reputation: 0
I re-build my OS back to Ubuntu 10.04 server. The same configuration file works fine now!
I am more sure that openswan doesn't support linux kernel 3.0
My current kernel version is 2.6.32

I'll do more research, and will post here later.
 
Old 04-24-2012, 01:47 AM   #3
lesca
Member
 
Registered: Sep 2010
Posts: 58

Original Poster
Rep: Reputation: 0
Move to 10.04 do solve something, but the openswan 2.6.23 in Ubuntu repository has many bugs.

Users need to update to at least 2.6.24, in my case is 2.6.27. The latest version is 2.6.28, you can find it from here: http://download.openswan.org/openswan/

you can still use apt-get to install higher version:
Code:
apt-get install python-software-properties
add-apt-repository ppa:openswan/ppa
apt-get update
apt-get install openswan
You can find more information on my blog (Chinese):
http://lesca.me/blog/2012/04/24/how-...sec-on-ubuntu/
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
VPN Between Ubuntu Openswan & Linksys WRV200 Fails at Phase 2 blackfish Linux - Networking 0 08-18-2010 11:19 AM
CentOS 5/RHEL 5 ipsec. Is OpenSwan necessary on a 2.6.18x kernel? req_info Linux - Software 0 10-21-2008 08:43 PM
Openswan NAT-T patch conflicts with RedHat 2.4.21 kernel barisdemiray Linux - Networking 1 07-14-2005 09:17 AM
Installing openswan on Sarge Kernel 2.6.7 neptunus Debian 1 09-25-2004 03:53 AM
Openswan 2.1.1 and kernel 2.6.4 Giovanni26 Linux - Security 0 04-15-2004 01:24 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 03:46 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration