xl2tpd auth error?

shams · 03-31-2013, 09:39 AM

i setup the l2tp tunnel with xl2tpd and openswan, ipsec get connected but xl2tpd get this error in /var/log/messages:

Quote:

Mar 30 16:57:25 user pppd[4662]: Plugin pppol2tp.so loaded.
Mar 30 16:57:25 user pppd[4662]: pppd 2.4.5 started by user, uid 0
Mar 30 16:57:25 user pppd[4662]: Using interface ppp1
Mar 30 16:57:25 user pppd[4662]: Connect: ppp1 <--> /dev/pts/2
Mar 30 16:57:28 user pppd[4662]: No CHAP secret found for authenticating us to l2tpd

this is xl2tpd.conf:

Quote:

[global]
access control = no
port = 1701
ipsec saref = yes
auth file = /etc/ppp/chap-secrets
debug tunnel = yes

[lac vpnserver]
lns = 46.165.221.230
name = client01855348
require chap = yes
refuse pap = yes
require authentication = yes
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes
redial = yes
redial timeout = 10
max redials = 6

this is /etc/ppp/options.xl2tpd:

Quote:

ipcp-accept-local
ipcp-accept-remote
ms-dns 8.8.8.8
ms-dns 8.8.4.4
refuse-eap
noauth
crtscts
idle 1800
mtu 1400
mru 1400
nodefaultroute
connect-delay 5000
plugin pppol2tp.so
lock
debug
noccp
proxyarp
#lcp-echo-interval 30
#lcp-echo-failure 4
logfile /var/log/xl2tpd.log

this is /etc/ppp/chap-secrets:

Quote:

# Secrets for authentication using CHAP
# client server secret IP addresses
client01855348 vpnserver "c698aghw6ce" *
vpnserver client01855348 "c698aghw6ce" *

client01855348 is the user name and c698aghw6ce is the password for the vpnserver.

nini09 · 04-03-2013, 02:16 PM

L2TP tunnel use its own authentication, user name and password could be different from VPN tunnel.

shams · 04-06-2013, 08:02 AM

Thanks for reply, the above username and apassword are for the l2tp authentication given to me by the vpn server.

nini09 · 04-08-2013, 02:36 PM

You can disable CHAP authentication to isolate the issue.

shams · 04-10-2013, 04:24 AM

I desable the chap and this is the /var/log/daemon.log:

Quote:

# tail -f daemon.log
Apr 10 13:57:22 user xl2tpd[6451]: Maximum retries exceeded for tunnel 25690. Closing.
Apr 10 13:57:22 user xl2tpd[6451]: Connection 0 closed to 46.165.221.230, port 1701 (Timeout)
Apr 10 13:57:25 user xl2tpd[6451]: build_fdset: closing down tunnel 25690
Apr 10 13:57:25 user xl2tpd[6451]: Will redial in 10 seconds
Apr 10 13:57:25 user xl2tpd[6451]: Can not find tunnel 25690 (refhim=0)
Apr 10 13:57:25 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 25690 Dumping.
Apr 10 13:57:26 user xl2tpd[6451]: Can not find tunnel 25690 (refhim=0)
Apr 10 13:57:26 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 25690 Dumping.
Apr 10 13:57:28 user xl2tpd[6451]: Can not find tunnel 25690 (refhim=0)
Apr 10 13:57:28 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 25690 Dumping.
Apr 10 13:57:29 user transmission-daemon[3687]: ubuntu-12.10-desktop-i386.iso IPv4 DHT announce done (tr-dht.c:542)
Apr 10 13:57:31 user xl2tpd[6451]: Can not find tunnel 25690 (refhim=0)
Apr 10 13:57:31 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 25690 Dumping.
Apr 10 13:57:32 user xl2tpd[6451]: Can not find tunnel 25690 (refhim=0)
Apr 10 13:57:32 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 25690 Dumping.
Apr 10 13:57:35 user xl2tpd[6451]: get_call: allocating new tunnel for host 46.165.221.230, port 1701.
Apr 10 13:57:35 user xl2tpd[6451]: Connecting to host 46.165.221.230, port 1701
Apr 10 13:57:40 user xl2tpd[6451]: Maximum retries exceeded for tunnel 54814. Closing.
Apr 10 13:57:40 user xl2tpd[6451]: Connection 0 closed to 46.165.221.230, port 1701 (Timeout)
Apr 10 13:57:42 user xl2tpd[6451]: Connection established to 46.165.221.230, 1701. Local: 54814, Remote: 64086 (ref=0/0).
Apr 10 13:57:42 user xl2tpd[6451]: magic_lac_dial: maximum retries exceeded.
Apr 10 13:57:42 user xl2tpd[6451]: check_control: Received out of order control packet on tunnel 64086 (got 0, expected 1)
Apr 10 13:57:42 user xl2tpd[6451]: handle_packet: bad control packet!
Apr 10 13:57:42 user xl2tpd[6451]: network_thread: bad packet
Apr 10 13:57:45 user xl2tpd[6451]: check_control: Received out of order control packet on tunnel 64086 (got 0, expected 1)
Apr 10 13:57:45 user xl2tpd[6451]: handle_packet: bad control packet!
Apr 10 13:57:45 user xl2tpd[6451]: network_thread: bad packet
Apr 10 13:57:45 user xl2tpd[6451]: Unable to deliver closing message for tunnel 54814. Destroying anyway.
Apr 10 13:57:45 user xl2tpd[6451]: Will redial in 10 seconds
Apr 10 13:57:47 user xl2tpd[6451]: Can not find tunnel 54814 (refhim=0)
Apr 10 13:57:47 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 54814 Dumping.
Apr 10 13:57:50 user xl2tpd[6451]: Can not find tunnel 54814 (refhim=0)
Apr 10 13:57:50 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 54814 Dumping.
Apr 10 13:57:51 user xl2tpd[6451]: Can not find tunnel 54814 (refhim=0)
Apr 10 13:57:51 user xl2tpd[6451]: network_thread: unable to find call or tunnel to handle packet. call = 0, tunnel = 54814 Dumping.
Apr 10 13:57:55 user xl2tpd[6451]: magic_lac_dial: maximum retries exceeded.

nini09 · 04-10-2013, 03:09 PM

Too much trouble.
Do you try configuration set of following link? They are different from yours.
https://wiki.archlinux.org/index.php...N_client_setup