L2TP-IPSec issues

[nichky]

i’m trying to establish L2TP tunnel.
Issues become when accessing by iPhone
MT to MT works great.

I haven’t tested it by android i’ll try today

[Cvan]

User port strict and obey under Peers

[nichky]

yes it is

[nichky]

i add sha1 in proposal,now it works.
Any explanation why it goes like that will be great

[sindy]

Because different clients use different proposals on their end and if the proposals of the peers don’t match in at least one algorithm for each purpose (authentication, encryption, initial key exchange, PFS), the connection cannot be established. So nothing on the list of auth-algorithms of your peer serving the L2TP/IPsec purpose was supported by the iPhone, while sha1 is.

[nichky]

Because different clients use different proposals on their end and if the proposals of the peers don’t match in at least one algorithm for each purpose (authentication, encryption, initial key exchange, PFS), the connection cannot be established. So nothing on the list of auth-algorithms of your peer serving the L2TP/IPsec purpose was supported by the iPhone, while sha1 is.

Thanks Sindy

Just one thing i know that i don’t need to play on peer more the one 0.0.0.0/0.
So what about one 0.0.0.0/0 and other particular address. So it means can i play with L2TP-Server and L2TP-Client.

[nichky]

yeee i found.

MTZ say Yes, it is possible to configure pptp client/server, l2tp client/server at the same time