Hi,
I have this weird issue. HAving the same setup/credentials my windows machine can establish an L2TP/ipsec tunnel, but my iphone cannot. The same behavior regardless the type of network that the 2 clients are connecting from (WIFI / 4G). Any ideas ?
here's a chunk from the log, and the vpn attempt is over a 4g network:
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: received Vendor ID payload [RFC 3947]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [4df37928e9fc4fd1b3262170d515c662]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: ignoring Vendor ID payload [FRAGMENTATION 80000000]
2019:04:07-17:31:44 circlepath pluto[5860]: packet from 109.166.134.186:543: received Vendor ID payload [Dead Peer Detection]
2019:04:07-17:31:44 circlepath pluto[5860]: "L_for MYUSER"[10] 109.166.134.186:543 #634: responding to Main Mode from unknown peer 109.166.134.186:543
2019:04:07-17:31:44 circlepath pluto[5860]: "L_for MYUSER"[10] 109.166.134.186:543 #634: NAT-Traversal: Result using RFC 3947: peer is NATed
2019:04:07-17:31:44 circlepath pluto[5860]: | NAT-T: new mapping 109.166.134.186:543/9533)
2019:04:07-17:31:44 circlepath pluto[5860]: "L_for MYUSER"[10] 109.166.134.186:9533 #634: ignoring informational payload, type IPSEC_INITIAL_CONTACT
2019:04:07-17:31:44 circlepath pluto[5860]: "L_for MYUSER"[10] 109.166.134.186:9533 #634: Peer ID is ID_IPV4_ADDR: '10.176.202.10'
2019:04:07-17:31:44 circlepath pluto[5860]: "L_for MYUSER"[9] 109.166.134.186:9533 #634: deleting connection "L_for MYUSER"[10] instance with peer 109.166.134.186 {isakmp=#0/ipsec=#0}
2019:04:07-17:31:44 circlepath pluto[5860]: "L_for MYUSER"[9] 109.166.134.186:9533 #634: sent MR3, ISAKMP SA established
2019:04:07-17:31:48 circlepath pluto[5860]: "L_for MYUSER"[9] 109.166.134.186:9533 #634: retransmitting in response to duplicate packet; already STATE_MAIN_R3
2019:04:07-17:31:51 circlepath pluto[5860]: "L_for MYUSER"[9] 109.166.134.186:9533 #634: retransmitting in response to duplicate packet; already STATE_MAIN_R3
2019:04:07-17:31:54 circlepath pluto[5860]: "L_for MYUSER"[9] 109.166.134.186:9533 #634: discarding duplicate packet -- exhausted retransmission; already STATE_MAIN_R3
2019:04:07-17:32:07 circlepath pluto[5860]: "L_for MYUSER"[9] 109.166.134.186:9533 #634: discarding duplicate packet -- exhausted retransmission; already STATE_MAIN_R3
Thank you,
This thread was automatically locked due to age.