This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

iPhone with L2TP no chance at all

I tried to setup a vpn channel with L2TP, but no chance.
See log:

2007:11:14-15:31:43 (none) l2tpd[26895]: Linux version 2.6.16.43-54-default on a i686, listening on IP address 0.0.0.0, port 1701
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: received Vendor ID payload [RFC 3947]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [4df37928e9fc4fd1b3262170d515c662]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2007:11:14-15:34:27 (none) pluto[14293]: packet from XX.XX.XX.XX:25: received Vendor ID payload [Dead Peer Detection]
2007:11:14-15:34:27 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: responding to Main Mode from unknown peer XX.XX.XX.XX:25
2007:11:14-15:34:27 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used
2007:11:14-15:34:28 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: NAT-Traversal: Result using RFC 3947: peer is NATed
2007:11:14-15:34:28 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used
2007:11:14-15:34:28 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:28 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:28 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:32 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:32 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:32 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:34 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:34 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:34 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:38 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:38 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:38 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:40 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:40 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:40 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:44 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:44 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:44 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:47 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:47 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:47 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:50 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:50 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:50 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:52 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:52 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:52 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:55 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:55 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:55 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25
2007:11:14-15:34:59 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: byte 2 of ISAKMP Identification Payload must be zero, but is not
2007:11:14-15:34:59 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: probable authentication failure (mismatch of preshared secrets?): malformed payload in packet
2007:11:14-15:34:59 (none) pluto[14293]: "D_REF_pKxgrUttBe_1"[1] XX.XX.XX.XX:25 #408: sending encrypted notification PAYLOAD_MALFORMED to XX.XX.XX.XX:25

This thread was automatically locked due to age.

Parents

0 tiredofnick over 17 years ago

having the same issue getting macs connected in general. log files look almost identical.
Cancel
Vote Up 0 Vote Down

Cancel
0 jjohnston62 over 17 years ago in reply to tiredofnick

So, maybe if you guys wanted help, you'd put more detail into your posts than a log?

versions? Mac versions, settings, PSK, whatever?
Cancel
Vote Up 0 Vote Down

Cancel
0 tiredofnick over 17 years ago in reply to jjohnston62

mac os 10.5.1 connecting to astaro gateway v7.100 via l2tp over ipsec, using preshared keys and RADIUS for authentication. never has worked, but pptp works fine. my radius server is working perfectly. as far as settings in os 10.5.1, i didn't change any of the advanced settings, but my IPv4 settings are set to use PPP, and the error i get when connecting is "could not negotiate a connection with the remote PPP server. please verify your settings and try again" if i turn IPv4 settings off, i get the same error. both logs show:
"2007:12:10-11:15:35 (none) pppd-l2tp[20915]: rcvd [LCP TermReq id=0x2 "MPPE required but peer negotiation failed"]
2007:12:10-11:15:35 (none) pppd-l2tp[20915]: LCP terminated by peer (MPPE required but peer negotiation failed) "
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 tiredofnick over 17 years ago in reply to jjohnston62

mac os 10.5.1 connecting to astaro gateway v7.100 via l2tp over ipsec, using preshared keys and RADIUS for authentication. never has worked, but pptp works fine. my radius server is working perfectly. as far as settings in os 10.5.1, i didn't change any of the advanced settings, but my IPv4 settings are set to use PPP, and the error i get when connecting is "could not negotiate a connection with the remote PPP server. please verify your settings and try again" if i turn IPv4 settings off, i get the same error. both logs show:
"2007:12:10-11:15:35 (none) pppd-l2tp[20915]: rcvd [LCP TermReq id=0x2 "MPPE required but peer negotiation failed"]
2007:12:10-11:15:35 (none) pppd-l2tp[20915]: LCP terminated by peer (MPPE required but peer negotiation failed) "
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Gert Hansen over 17 years ago in reply to tiredofnick

Hi there,
i have my iphone properly connected via L2TP and PPTP against the ASG 7.100.

PPTP works always like a charm.
L2TP connects fine, but sometimes larger packets seem to have problems.

regards
Gert
Cancel
Vote Up 0 Vote Down

Cancel
0 tiredofnick over 17 years ago in reply to Gert Hansen

what about mac desktops/laptops? before 7.100 i could login using l2tp over ipsec, since then i've had absolutely no luck.
Cancel
Vote Up 0 Vote Down

Cancel
0 warper over 17 years ago in reply to tiredofnick

Have not done l2tp but have done ipsec for mac laptops to astaro 7.1 which basically uses racoon as the backend.
Cancel
Vote Up 0 Vote Down

Cancel
0 jjohnston62 over 17 years ago in reply to tiredofnick

Hmmm.... I have not tested Leopard (10.5.1) with L2TP on 7.100. But I have either had any problems doing L2TP on OS X either. I normally set it up with PSK, and most of our customer sites using local users/authentication instead of Active Directory/edirectory, Radius, etc.
Cancel
Vote Up 0 Vote Down

Cancel