L2TP not working

Microsaft · #1 (**permalink**) 06-29-2009, 08:06 AM

I've noticed that L2TP is not working anymore (it has worked).

When I try to connect I can see that the packets are beeing droped:

Code:

15:59:51 Default DROP UDP 62.***.yyy.zzz : 1701  → 91.***.yyy.zzz : 1701  len=128 ttl=117 tos=0x00 srcmac=00:00:00:00:00:00 dstmac=00:1a:8c:15:0a:58

The other interessing I've found the the log:

Quote:

2009:06:26-16:00:52 gateway xl2tpd[25952]: Listening on IP address 0.0.0.0, port 1701

Anyone any ideas?

Reboot, change the interface to listen on didn't solved the issue.
(PPTP and SSL VPN are working)

regards
M$

khardeveld · #2 (**permalink**) 06-29-2009, 09:04 AM

Did you change anything in your packet filter rules or network definitions?

Normally Default drops imply that no packet filter allowing the packet has been found for the interface you want to connect to.

Could you check if L2TP is still port 1701 in your network service defintions, that this is member of the VPN protocols group and that either this service or the group is allowed on the interface you want to connect to?

Microsaft · #3 (**permalink**) 06-29-2009, 09:12 AM

Looks as it should - only the VPN-Group isn't allowed on that interface, or to be correct on ANY interface.

But as eg PPTP is working I don't think that this is the issue.

The last change I've done was going to v7.403....

BAlfson · #4 (**permalink**) 06-29-2009, 02:04 PM

The Astaro L2TP over IPsec VPN server should capture packets before consideration by the packet filter. If you are going through the Astaro to make an L2TP connection with another VPN server, then you need to allow the IPsec protocols; if not, you don't.

You might check your L2TP setup to see that it's still configured for the External interface. Also, if you are using a cert instead of PSK, on the 'IPsec' 'Advanced' tab, make sure 'Strict policy' is not checked.

Cheers - Bob