am not too sure why it disconnects but
you may want to try l2tpd as I fixed
the packet echo problem (W2K complaining
about loopback detected).

Dom

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 04 February 2003 16:22
To: [EMAIL PROTECTED]
Subject: rp-l2tpd is closing down


Hi !

I'm using rp-l2tp with the road-warrior support (downloaded from CVS 
server this morning).

I'm experiencing a disconnection problem from rp-l2tp : 1 or 2 minutes 
after connection has been established, it outputs an error and starts 
closing down the tunnel...


338.636 xmit_queued(32947/91): rws=8 cwnd=2 ssthresh=1 outstanding=0
 338.636 dgram_send_to_wire() -> type=HELLO, tid=91, sid=0, Nr=5, Ns=6
 338.636 loop in xmit_queued(32947/91): rws=8 cwnd=2 ssthresh=1 
outstanding=1
 339.646 xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 outstanding=0
 339.646 dgram_send_to_wire() -> type=HELLO, tid=91, sid=0, Nr=5, Ns=6
 339.646 loop in xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 
outstanding=1
 341.655 xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 outstanding=0
 341.655 dgram_send_to_wire() -> type=HELLO, tid=91, sid=0, Nr=5, Ns=6
 341.656 loop in xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 
outstanding=1
 345.665 xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 outstanding=0
 345.665 dgram_send_to_wire() -> type=HELLO, tid=91, sid=0, Nr=5, Ns=6
 345.666 loop in xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 
outstanding=1
 353.675 xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 outstanding=0
 353.675 dgram_send_to_wire() -> type=HELLO, tid=91, sid=0, Nr=5, Ns=6
 353.675 loop in xmit_queued(32947/91): rws=8 cwnd=1 ssthresh=1 
outstanding=1
Error: Too many retransmissions on tunnel (32947/91); closing down
 361.685 tunnel_free(32947/91)
 361.685 session((32947/91, 1319/1)) state established -> idle
 361.685 session_free((32947/91, 1319/1)) Tunnel closing down
 370.402 dgram_take_from_wire() -> type=HELLO, tid=32947, sid=0, Nr=6, Ns=5
Error: Invalid control message - unknown tunnel ID 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
 380.409 dgram_take_from_wire() -> type=HELLO, tid=32947, sid=0, Nr=6, Ns=5
Error: Invalid control message - unknown tunnel ID 32947
Error: Unknown tunnel 32947
 390.413 dgram_take_from_wire() -> type=HELLO, tid=32947, sid=0, Nr=6, Ns=5
Error: Invalid control message - unknown tunnel ID 32947
 400.416 dgram_take_from_wire() -> type=HELLO, tid=32947, sid=0, Nr=6, Ns=5
Error: Invalid control message - unknown tunnel ID 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
 410.419 dgram_take_from_wire() -> type=HELLO, tid=32947, sid=0, Nr=6, Ns=5
Error: Invalid control message - unknown tunnel ID 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
Error: Unknown tunnel 32947
 420.424 dgram_take_from_wire() -> type=HELLO, tid=32947, sid=0, Nr=6, Ns=5
Error: Invalid control message - unknown tunnel ID 32947



My config is the following :
VPN server is Linux Freeswan 1.99, rp-l2tp.
VPN client is W2K, Service Pack 3.
The VPN client is accessing the Internet through an ADSL router (using 
NAT) so nat_traversal has been
enabled on server side.
The VPN client is a road-warrior so I'm not supposed to know its IP in 
advance.


/etc/l2tp/l2tp.conf :
--------------------------
# Global section (by default, we start in global mode)
global

# Load handlers
load-handler "/usr/lib/l2tp/plugins/sync-pppd.so"
load-handler "/usr/lib/l2tp/plugins/cmd.so"

# Bind address
listen-port 1701

# Configure the sync-pppd handler.  You MUST have a "section sync-pppd" line
# even if you don't set any options.
section sync-pppd
lns-pppd-opts "MY.LOCAL.IP.FOR_PPP: connect-delay 5000 require-chap xonxoff"

# Peer section
section peer
peer 0.0.0.0
mask 0
lns-handler sync-pppd
hide-avps no
retain-tunnel 0
strict-ip-check 0

# Configure the cmd handler.  You MUST have a "section cmd" line
# even if you don't set any options.
section cmd
--------------------

If someone could give a clue about that trouble ...

Many thanks !


-- 
BD




Reply via email to