Bug #6596
closedNot able to connect from Windows 7 to L2TP/IPsec
0%
Description
Hello,
First, thanks for all your work. This is a fine product that I have used numerous times and it usually works very nicely. I have actually set up a number of OpenVPN instances and all worked seamlessly. However, one of my client asked for an alternative to OpenVPn without the use of certificates so I have been trying to get L2TP/IPsec to work. Unfortunately, it looks as if I am stuck and I can't seem to make any progress by myself. I am hoping that by giving you as much info as possible, you will be able to give me that little nudge that will allow me to solve my issue.
- I have tried to followed scrupulously the instructions at https://doc.pfsense.org/index.php/L2TP/IPsec (see attached configuration screenshots)
- I have modified my registry as per Microsoft instructions (https://support.microsoft.com/en-us/kb/926179)
- I have also tried to connect with my Android cell phone and it did not work either
- I have tried to switch off the IPSec passthru option on my router and the IPsec packets were blocked
Now, according to the logs provided on the instructions page, my IPsec connection seems to establish properly. Note, however, that I do not see the two following lines that show up in your logs
Feb 4 13:56:40 charon: 14[KNL] interface l2tp0 activated Feb 4 13:56:40 charon: 15[KNL] 192.168.32.1 appeared on l2tp0
The VPN->L2TP services indicates the service is up and I also see the listener on the WAN interface on the pfSense console
[2.3.1-RELEASE][root@pfSense.localdomain]/root: netstat -an|grep 1701 udp4 0 0 198.130.xxx.xxx.1701 *.*
I do not see anything that is being blocked on any interface at the firewall and that would relate to the connection (ports 500, 4500, 1701). As a matter of fact, I see the 500 and 4500 connections are accepted on my WAN interface and the 1701 connection is accepted on my IPsec interface. And when I run tcpdump on the IPsec interface, I see what is shown in the screenshot
Files