<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello,<div class=""><br class=""></div><div class="">I am having difficulties to open a VPN tunnel (L2tP VPN from iOS14).</div><div class=""><br class=""></div><div class="">These are the config files. Many thanks in advance!</div><div class=""><br class=""></div><div class=""><div class=" message-userContent lbContainer js-lbContainer" data-lb-id="post-5523025" data-lb-caption-desc="Wuchtbrumme · 11.10.20 um 22:29" style="box-sizing: border-box; caret-color: rgb(44, 44, 44); color: rgb(44, 44, 44); font-family: "Open Sans", Helvetica, Arial, sans-serif; font-size: 13px;"><article class="js-selectToQuote message-body" style="box-sizing: border-box; padding-bottom: 8px; margin: 0px; overflow: hidden;"><div class="bbWrapper" style="box-sizing: border-box;"><br style="box-sizing: border-box;" class="">ipsec.conf:<br style="box-sizing: border-box;" class=""><div class="bbCodeBlock bbCodeBlock--code bbCodeBlock--screenLimited" style="box-sizing: border-box; margin: 0.75em 0px; background-color: rgb(250, 250, 250); border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(224, 224, 224) rgb(224, 224, 224) rgb(224, 224, 224) rgb(150, 50, 30); background-position: initial initial; background-repeat: initial initial;"><div class="bbCodeBlock-title" style="box-sizing: border-box; padding: 8px 16px; font-size: 1.2rem; color: rgb(149, 149, 149); background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;">Code:</div><div class="bbCodeBlock-content" dir="ltr" style="box-sizing: border-box; position: relative; padding: 8px 16px; background-color: rgb(255, 255, 255); max-height: 70vh; overflow: auto;"><pre class="bbCodeCode" dir="ltr" data-xf-init="code-block" data-lang="" style="box-sizing: border-box; font-family: "Roboto Mono", "Andale Mono", "Ubuntu Mono", monospace; font-size: 1.2rem; word-wrap: normal; margin-top: 0px; margin-bottom: 0px; padding: 0px 0px 16px; line-height: 1.4; direction: ltr; position: relative; tab-size: 4;"><code style="box-sizing: border-box; font-family: inherit; font-size: 1em;" class="">config setup
virtual-private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!192.168.42.0/24,%v4:!192.168.43.0/24
protostack=netkey
interfaces=%defaultroute
uniqueids=no
conn shared
left=%defaultroute
leftid=192.168.1.2
right=%any
encapsulation=yes
authby=secret
pfs=no
rekey=no
keyingtries=5
dpddelay=30
dpdtimeout=120
dpdaction=clear
ikev2=no
ike=aes256-sha1-modp1024,aes128-sha1-modp1024,3des-sha1-modp1024aes256-sha2,aes128-sha2,aes256-sha1,aes128-sha1,aes256-sha2;modp1024,aes128-sha1;modp1024
phase2alg=aes_gcm-null,aes128-sha1,aes256-sha1,aes256-sha2_512,aes128-sha2,aes256-sha2
#ike=aes128-sha1-modp1536,aes128-sha1-modp1024,aes128-md5-modp1536,aes128-md5-modp1024,3des-sha1-modp1536,3des-sha1-modp1024,3des-md5-modp1536,3des-md5-modp1024
#esp=aes128-sha1-modp1536,aes128-sha1-modp1024,aes128-md5-modp1536,aes128-md5-modp1024,3des-sha1-modp1536,3des-sha1-modp1024,3des-md5-modp1536,3des-md5-modp1024
#esp=aes256-sha256,aes256-sha1,3des-sha1
sha2-truncbug=no
conn L2TP-PSK3
pfs=no
auto=add
ikev2=no
ike=aes256-sha1-modp1024,aes128-sha1-modp1024,3des-sha1-modp1024
esp=aes256-sha2_512,aes256-sha1,aes256-sha2_256,3des-sha1
authby=secret
type=transport
left=192.168.1.2
leftprotoport=17/1701
right=%any
rightprotoport=17/%any
dpddelay=30
dpdtimeout=120
dpdaction=clear</code></pre></div></div>ipsec.secrets:<br style="box-sizing: border-box;" class=""><div class="bbCodeBlock bbCodeBlock--code bbCodeBlock--screenLimited" style="box-sizing: border-box; margin: 0.75em 0px; background-color: rgb(250, 250, 250); border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(224, 224, 224) rgb(224, 224, 224) rgb(224, 224, 224) rgb(150, 50, 30); background-position: initial initial; background-repeat: initial initial;"><div class="bbCodeBlock-title" style="box-sizing: border-box; padding: 8px 16px; font-size: 1.2rem; color: rgb(149, 149, 149); background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;">Code:</div><div class="bbCodeBlock-content" dir="ltr" style="box-sizing: border-box; position: relative; padding: 8px 16px; background-color: rgb(255, 255, 255); max-height: 70vh; overflow: auto;"><pre class="bbCodeCode" dir="ltr" data-xf-init="code-block" data-lang="" style="box-sizing: border-box; font-family: "Roboto Mono", "Andale Mono", "Ubuntu Mono", monospace; font-size: 1.2rem; word-wrap: normal; margin-top: 0px; margin-bottom: 0px; padding: 0px 0px 16px; line-height: 1.4; direction: ltr; position: relative; tab-size: 4;"><code style="box-sizing: border-box; font-family: inherit; font-size: 1em;" class="">%any %any : PSK "PSK-Passphrase"</code></pre></div></div>xl2tpd.conf:<br style="box-sizing: border-box;" class=""><div class="bbCodeBlock bbCodeBlock--code bbCodeBlock--screenLimited" style="box-sizing: border-box; margin: 0.75em 0px; background-color: rgb(250, 250, 250); border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(224, 224, 224) rgb(224, 224, 224) rgb(224, 224, 224) rgb(150, 50, 30); background-position: initial initial; background-repeat: initial initial;"><div class="bbCodeBlock-title" style="box-sizing: border-box; padding: 8px 16px; font-size: 1.2rem; color: rgb(149, 149, 149); background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;">Code:</div><div class="bbCodeBlock-content" dir="ltr" style="box-sizing: border-box; position: relative; padding: 8px 16px; background-color: rgb(255, 255, 255); max-height: 70vh; overflow: auto;"><pre class="bbCodeCode" dir="ltr" data-xf-init="code-block" data-lang="" style="box-sizing: border-box; font-family: "Roboto Mono", "Andale Mono", "Ubuntu Mono", monospace; font-size: 1.2rem; word-wrap: normal; margin-top: 0px; margin-bottom: 0px; padding: 0px 0px 16px; line-height: 1.4; direction: ltr; position: relative; tab-size: 4;"><code style="box-sizing: border-box; font-family: inherit; font-size: 1em;" class="">[global]
port = 1701
[lns default]
ip range = 192.168.1.220-192.168.1.230
local ip = 192.168.1.2
require chap = yes
refuse pap = yes
require authentication = yes
name = l2tpd
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes</code></pre></div></div>chap-secrets:<br style="box-sizing: border-box;" class=""><div class="bbCodeBlock bbCodeBlock--code bbCodeBlock--screenLimited" style="box-sizing: border-box; margin: 0.75em 0px; background-color: rgb(250, 250, 250); border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(224, 224, 224) rgb(224, 224, 224) rgb(224, 224, 224) rgb(150, 50, 30); background-position: initial initial; background-repeat: initial initial;"><div class="bbCodeBlock-title" style="box-sizing: border-box; padding: 8px 16px; font-size: 1.2rem; color: rgb(149, 149, 149); background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;">Code:</div><div class="bbCodeBlock-content" dir="ltr" style="box-sizing: border-box; position: relative; padding: 8px 16px; background-color: rgb(255, 255, 255); max-height: 70vh; overflow: auto;"><pre class="bbCodeCode" dir="ltr" data-xf-init="code-block" data-lang="" style="box-sizing: border-box; font-family: "Roboto Mono", "Andale Mono", "Ubuntu Mono", monospace; font-size: 1.2rem; word-wrap: normal; margin-top: 0px; margin-bottom: 0px; padding: 0px 0px 16px; line-height: 1.4; direction: ltr; position: relative; tab-size: 4;"><code style="box-sizing: border-box; font-family: inherit; font-size: 1em;" class="">"vpnuser" l2tpd "T0p@s!“ *</code></pre></div></div>log:</div><div class="bbWrapper" style="box-sizing: border-box;"><div class="bbCodeBlock bbCodeBlock--code bbCodeBlock--screenLimited" style="box-sizing: border-box; margin: 0.75em 0px; background-color: rgb(250, 250, 250); border-width: 1px 1px 1px 2px; border-style: solid; border-color: rgb(224, 224, 224) rgb(224, 224, 224) rgb(224, 224, 224) rgb(150, 50, 30); background-position: initial initial; background-repeat: initial initial;"><div class="bbCodeBlock-title" style="box-sizing: border-box; padding: 8px 16px; font-size: 1.2rem; color: rgb(149, 149, 149); background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;">Code:</div><div class="bbCodeBlock-content" dir="ltr" style="box-sizing: border-box; position: relative; padding: 8px 16px; background-color: rgb(255, 255, 255); max-height: 70vh; overflow: auto;"><pre class="bbCodeCode" dir="ltr" data-xf-init="code-block" data-lang="" style="box-sizing: border-box; font-family: "Roboto Mono", "Andale Mono", "Ubuntu Mono", monospace; font-size: 1.2rem; word-wrap: normal; margin-top: 0px; margin-bottom: 0px; padding: 0px 0px 16px; line-height: 1.4; direction: ltr; position: relative; tab-size: 4;"><code style="box-sizing: border-box; font-family: inherit; font-size: 1em;" class="">Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: responding to Main Mode from unknown peer 192.168.1.135:500
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_SHA2_256, MODP2048] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_SHA1, MODP2048] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_MD5, MODP2048] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: WARNING: connection L2TP-PSK3 PSK length of 25 bytes is too short for sha2_512 PRF in FIPS mode (32 bytes required)
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_SHA2_512, MODP2048] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_SHA2_256, MODP1536] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_SHA1, MODP1536] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_MD5, MODP1536] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Oakley Transform [AES_CBC (256), HMAC_SHA2_256, MODP1024] refused
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: STATE_MAIN_R1: sent MR1, expecting MI2
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: STATE_MAIN_R2: sent MR2, expecting MI3
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: ignoring informational payload IPSEC_INITIAL_CONTACT, msgid=00000000, length=28
Oct 11 22:36:46 vpnserver pluto[4616]: | ISAKMP Notification Payload
Oct 11 22:36:46 vpnserver pluto[4616]: | 00 00 00 1c 00 00 00 01 01 10 60 02
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: Peer ID is ID_IPV4_ADDR: '192.168.1.135'
Oct 11 22:36:46 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=PRESHARED_KEY cipher=AES_CBC_256 integ=HMAC_SHA1 group=MODP1024}
Oct 11 22:36:47 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: the peer proposed: 192.168.1.2/32:17/1701 -> 192.168.1.135/32:17/0
Oct 11 22:36:47 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: responding to Quick Mode proposal {msgid:62c9d168}
Oct 11 22:36:47 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: us: 192.168.1.2<192.168.1.2>:17/1701
Oct 11 22:36:47 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: them: 192.168.1.135:17/56214
Oct 11 22:36:47 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 transport mode {ESP=>0x0288310b <0xa712410c xfrm=AES_CBC_256-HMAC_SHA2_256_128 NATOA=none NATD=none DPD=active}
Oct 11 22:36:47 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0x0288310b <0xa712410c xfrm=AES_CBC_256-HMAC_SHA2_256_128 NATOA=none NATD=none DPD=active}
Oct 11 22:37:07 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: received Delete SA(0x0288310b) payload: deleting IPsec State #8
Oct 11 22:37:07 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: deleting other state #8 (STATE_QUICK_R2) aged 20.132s and sending notification
Oct 11 22:37:07 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #8: ESP traffic information: in=623B out=0B
Oct 11 22:37:07 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135 #7: deleting state (STATE_MAIN_R3) aged 21.143s and sending notification
Oct 11 22:37:07 vpnserver pluto[4616]: "L2TP-PSK3"[6] 192.168.1.135: deleting connection "L2TP-PSK3"[6] 192.168.1.135 instance with peer 192.168.1.135 {isakmp=#0/ipsec=#0}</code></pre><div class=""><code style="box-sizing: border-box; font-family: inherit; font-size: 1em;" class=""><br class=""></code></div></div></div></div><div class="js-selectToQuoteEnd" style="box-sizing: border-box; height: 0px; font-size: 0px; overflow: hidden;"></div></article></div></div></body></html>