Comments on: Linux L2TP/IPSec with iPhone and Mac OS/X clients http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/ A Dutch techie in China Fri, 16 Jul 2010 05:47:22 +0000 hourly 1 http://wordpress.org/?v=3.0 By: niels http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-1163 niels Fri, 16 Jul 2010 05:47:22 +0000 http://nielspeen.com/blog/?p=268#comment-1163 I think you're using a very old version of Debian. If possible, please upgrade to a more recent version. I think you’re using a very old version of Debian. If possible, please upgrade to a more recent version.

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: js http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-1161 js Sat, 22 May 2010 05:16:48 +0000 http://nielspeen.com/blog/?p=268#comment-1161 Hi Niels! Thanks so much for such a good blog! I'm so glad I finally found that page! I'm a real noob in Linux and I run into several issues: First I can't find the package libcurl4-openssl-dev: s15364949:~# apt-get install libcurl4-openssl-dev Reading package lists... Done Building dependency tree... Done E: Couldn't find package libcurl4-openssl-dev Second, there is no such directory as strongswan-4.2.4/ In my case, there is only strongswan-2.8.0+dfsg, can it work as well? Finally, I'm not sure what u mean by "edit debian/rules" ? Thx you so much for your attention!!! I would really appreciate your help!! Best regards Hi Niels!

Thanks so much for such a good blog! I’m so glad I finally found that page!

I’m a real noob in Linux and I run into several issues:

First I can’t find the package libcurl4-openssl-dev:

s15364949:~# apt-get install libcurl4-openssl-dev
Reading package lists… Done
Building dependency tree… Done
E: Couldn’t find package libcurl4-openssl-dev

Second, there is no such directory as strongswan-4.2.4/

In my case, there is only strongswan-2.8.0+dfsg, can it work as well?

Finally, I’m not sure what u mean by “edit debian/rules” ?

Thx you so much for your attention!!! I would really appreciate your help!!

Best regards

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: Eric Blue’s Blog » Weekly Lifestream for May 2nd http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-1159 Eric Blue’s Blog » Weekly Lifestream for May 2nd Mon, 03 May 2010 02:35:15 +0000 http://nielspeen.com/blog/?p=268#comment-1159 [...] Shared Linux L2TP/IPSec with iPhone and Mac OS/X clients | Niels’ Blog. [...] [...] Shared Linux L2TP/IPSec with iPhone and Mac OS/X clients | Niels’ Blog. [...]

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: Blog of Ingo Jürgensmann http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-1147 Blog of Ingo Jürgensmann Tue, 16 Feb 2010 06:15:59 +0000 http://nielspeen.com/blog/?p=268#comment-1147 <strong>StrongSwan and L2TP/IPsec on Debian...</strong> Mac OS X and other operating systems are using L2TP/IPsec for VPN connections. I'm running StrongSwan as my IPsec stack of choice, so I wanted to setup a VPN between my Debian lenny server and OS X as my roadwarrior. There's a nice howto on nielspeen... StrongSwan and L2TP/IPsec on Debian…

Mac OS X and other operating systems are using L2TP/IPsec for VPN connections. I’m running StrongSwan as my IPsec stack of choice, so I wanted to setup a VPN between my Debian lenny server and OS X as my roadwarrior. There’s a nice howto on nielspeen…

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: Sig http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-1145 Sig Sat, 13 Feb 2010 17:48:26 +0000 http://nielspeen.com/blog/?p=268#comment-1145 I'm getting the same error: nitial Main Mode message received on 10.212.183.210:500 but no connection has been authorized with policy=PSK Any ideas? I’m getting the same error: nitial Main Mode message received on 10.212.183.210:500 but no connection has been authorized with policy=PSK

Any ideas?

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: Martin Sullivan http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-1139 Martin Sullivan Fri, 29 Jan 2010 18:16:12 +0000 http://nielspeen.com/blog/?p=268#comment-1139 To add to all the other praise, thanks for the excellent how-to. I like Oliver Gorwits found that secrets needed to be kept in chaps-secrets file too. On a related note, I found some strange behaviour in the WiFi department as well. It would seem that when confronted with an 'open' WiFi connection, the iPhone seems to make a surreptitious connection back to Apple. If this crashes into a firewall, then the WiFi connection is dropped. I've written the circumvention up and stuck it up on the ZOIS web-site. If interested URLs can be posted here, but I don't want to look like link-spam. M. To add to all the other praise, thanks for the excellent how-to. I like Oliver Gorwits found that secrets needed to be kept in chaps-secrets file too.

On a related note, I found some strange behaviour in the WiFi department as well. It would seem that when confronted with an ‘open’ WiFi connection, the iPhone seems to make a surreptitious connection back to Apple. If this crashes into a firewall, then the WiFi connection is dropped. I’ve written the circumvention up and stuck it up on the ZOIS web-site. If interested URLs can be posted here, but I don’t want to look like link-spam. M.

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: Kristofer Neyens http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-327 Kristofer Neyens Fri, 06 Nov 2009 14:29:07 +0000 http://nielspeen.com/blog/?p=268#comment-327 Niels, Thanks for the great write up. I've been messing with trying to install a VPN solution on Ubuntu server 9.1 for 4 days now and I stumbled across your write up last night. The only line I'm not sure about is... "Now edit debian/rules and change..." I don't have much experience compiling my own code so I'll appologize upfront. I can install and configure packages with the best of them though (-; Thanks, Kristofer Niels,

Thanks for the great write up. I’ve been messing with trying to install a VPN solution on Ubuntu server 9.1 for 4 days now and I stumbled across your write up last night.

The only line I’m not sure about is…
“Now edit debian/rules and change…”

I don’t have much experience compiling my own code so I’ll appologize upfront. I can install and configure packages with the best of them though (-;

Thanks,

Kristofer

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: Oliver Gorwits http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-315 Oliver Gorwits Mon, 02 Nov 2009 01:29:34 +0000 http://nielspeen.com/blog/?p=268#comment-315 Hi Niels, Just wanted to thank you for this excellent post, the instructions got me up and running with my iPhone, I'm really happy! On Ubuntu 9.10 I had to install the four strongswan-* packages which I built, and also ipsec-tools has been added as a dependency. I also had to use /etc/ppp/chap-secrets as the secret file instead of /etc/xl2tp/l2tp-secrets. Many thanks once again, this post was really appreciated, regards, oliver. Hi Niels,

Just wanted to thank you for this excellent post, the instructions got me up and running with my iPhone, I’m really happy!

On Ubuntu 9.10 I had to install the four strongswan-* packages which I built, and also ipsec-tools has been added as a dependency. I also had to use /etc/ppp/chap-secrets as the secret file instead of /etc/xl2tp/l2tp-secrets.

Many thanks once again, this post was really appreciated,

regards,
oliver.

Like or Dislike: Thumb up 1 Thumb down 0

]]> By: Luke Gorrie http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-309 Luke Gorrie Fri, 23 Oct 2009 13:20:29 +0000 http://nielspeen.com/blog/?p=268#comment-309 Thank you very very much for this excellent howto. Thank you very very much for this excellent howto.

Like or Dislike: Thumb up 0 Thumb down 0

]]> By: drew http://nielspeen.com/blog/2009/04/linux-l2tpipsec-with-iphone-and-mac-osx-clients/comment-page-1/#comment-279 drew Mon, 05 Oct 2009 22:52:54 +0000 http://nielspeen.com/blog/?p=268#comment-279 I tried using your settings verbatim and I keep getting the following line in my "auth.log": Oct 5 22:21:14 daedalus pluto[7459]: packet from XXX.XXX.XXX.XXX:500: initial Main Mode message received on YYY.YYY.YYY.YYY:500 but no connection has been authorized with policy=PSK My StrongSwan settings are literally copy-and-pasted from yours (text-encoding is unix :-) ) with the exception of substituting for the appropriate variables. (I also did compile strongswan with nat-t.) Any thoughts? I tried using your settings verbatim and I keep getting the following line in my “auth.log”:

Oct 5 22:21:14 daedalus pluto[7459]: packet from XXX.XXX.XXX.XXX:500: initial Main Mode message received on YYY.YYY.YYY.YYY:500 but no connection has been authorized with policy=PSK

My StrongSwan settings are literally copy-and-pasted from yours (text-encoding is unix :-) ) with the exception of substituting for the appropriate variables. (I also did compile strongswan with nat-t.)

Any thoughts?

Like or Dislike: Thumb up 0 Thumb down 0

]]>