Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

L2TP VPN stopped working

Hi, We have an established L2TP VPN tunnel that has been working for years. Local authentication on the firewall.

The firewall is XG ver 19.01 MR-1 Build 365, and a copule of days ago the VPN just stopped working.

Around the same time we imported the Domain and DNS into Cloudflare - I'm not sure if that has anything to do with it or not.

I have other client swith the same XG / Cloudflare setup that are working fine.

I have tried deleting and re-creating the L2TP tunnel, I have changed the PSK. Nothing seems to work.

I have had various error messages, from none at all (just hangs on auth) to the current one, which is:

"The L2TP  connection attempt failed because the security layer could not negotiate compatible parameters with the remote computer" This srror is from a Win 11 PC. My iPhone just times out when I try to connect the VPN from there.

What should I try next?

Thanks



This thread was automatically locked due to age.
Parents Reply
  • Can you also share L2TP global settings. and On the CLI, select option 5. Device Management, then option 3. Advanced Shell
    And share the Strongswan.log and charon.log while connecting the client !!
    To check the live logs while connecting you can type the following
    1.) tail -f /log/strongswan.log 
    2.) tail -f /log/charon.log

    To enable the debug service for the strongswan - service strongswan:debug -ds nosyn
    Also take a tcpdump on the port 1701 while you can connect the client !!
    #tcpdump -nei any port 1701 

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

Children