How to connect VPN Client to VPN Server

nana12 · 07-08-2017, 04:30 AM

I have VPN server using Openswan with address 103.19.208.247

Then, i want connect my laptop (CENTOS) with IP 103.19.208.243 to VPN server. Here my configuration:

/etc/ipsec.conf

Code:

    config setup

    protostack=netkey

    dumpdir=/var/run/pluto

    nat_traversal=yes virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4: 25.0.0.0/8,%v4:100.64.0.0/10,%v6:fd00::/8,%v6:fe80::/10

    conn L2TP-PSK

    authby=secret

    pfs=no

    auto=add

    keyingtries=3

    ikelifetime=8h

    rekey=no

    type=transport

    left=103.19.208.243

    leftprotoport=17/1701

    right=103.19.208.247

    rightprotoport=17/1701

    dpddelay=10

    dpdtimeout=90

    dpdaction=clear

/etc/ipsec.secrets

Code:

 103.19.208.243 103.19.208.247: PSK "vpnku"

/etc/xl2tpd/xl2tpd.conf

Code:

 [lac vpn-connection]

    lns=103.19.208.247

    ppp debug = yes

    pppoptfile = /etc/ppp/options.xl2tpd

    length bit = yes

/etc/ppp/options.xl2tpd

Code:

 ipcp-accept-local

    ipcp-accept-remote

    require-mschap-v2

    refuse-pap

    ms-dns 8.8.8.8

    noccp

    auth

    crtscts

    idle 1800

    mtu 1410

    mru 1410

    nodefaultroute

    debug

    lock

    proxyarp

    connect-delay 5000

    name lele (myvpn username)

    password nana1234 (my vpn password)

and when i type:ipsec auto --up L2TP-PSK

002 "L2TP-PSK" #10: initiating Quick Mode PSK+ENCRYPT+DONT_REKEY+UP+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW {using isakmp#1 msgid:ed53b5a6 proposal=defaults pfsgroup=no-pfs} 117 "L2TP-PSK" #10: STATE_QUICK_I1: initiate 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 500ms for response 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 1000ms for response 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 2000ms for response 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 4000ms for response 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 8000ms for response 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 16000ms for response 010 "L2TP-PSK" #10: STATE_QUICK_I1: retransmission; will wait 32000ms for response 031 "L2TP-PSK" #10: max number of retransmissions (8) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal 000 "L2TP-PSK" #10: starting keying attempt 2 of at most 3, but releasing whack

What should i do to solve this problem to connect my VPNServer?

Thank you

AwesomeMachine · 07-08-2017, 01:52 PM

It looks like you're not connecting at all. Is there some reason you hard coded the user and pass? You might have to open the port openswan uses.

nana12 · 07-09-2017, 06:47 PM

Quote:

Originally Posted by AwesomeMachine

It looks like you're not connecting at all. Is there some reason you hard coded the user and pass? You might have to open the port openswan uses.

I just looked the tutorial of how to connecting my VPN client to server on https://wiki.archlinux.org/index.php...N_client_setup

How to solve that problem? I tried to find the solution on Google but i can't find that.

AwesomeMachine · 07-09-2017, 07:07 PM

Are there firewalls on the two machines?

nana12 · 07-09-2017, 07:14 PM

Quote:

Originally Posted by AwesomeMachine

Are there firewalls on the two machines?

Yes, There are. But, i stopped that firewall and when i check, the firewall was stopped

AwesomeMachine · 07-10-2017, 12:06 AM

The both firewalls must to allow vpn or you have to stop both firewalls.

sundialsvcs · 07-10-2017, 12:12 AM

"Quick Mode" is a well-intentioned weak link in this type of VPN. Try disabling it on both sides.

nana12 · 07-10-2017, 01:52 AM

Quote:

Originally Posted by AwesomeMachine

The both firewalls must to allow vpn or you have to stop both firewalls.

My firewall on Server side and client side allow vpn and was stopped. But, the error still same

nana12 · 07-10-2017, 01:53 AM

Quote:

Originally Posted by sundialsvcs

"Quick Mode" is a well-intentioned weak link in this type of VPN. Try disabling it on both sides.

How to disabling that Quick mode?

Hanlin_58 · 07-12-2017, 12:22 AM

Am happy reading this post