Re: IPsec debugging

[christos%zoulas.com@localhost (Christos Zoulas)]

On Feb 29,  6:51pm, tls%panix.com@localhost (Thor Lancelot Simon) wrote:
-- Subject: Re: IPsec debugging

| On Sun, Feb 28, 2016 at 02:46:02PM +0100, Frank Wille wrote:
| > Christos Zoulas wrote:
| > 
| > > Have you gotten the same configuration to work with a shared secret?
| > 
| > Unfortunately I cannot change the configuration of the Lancom router in my
| > office, as the VPN works fine and is needed for a dozen of Windows
| > notebooks.
| 
| Windows notebooks you say.  Are you *sure* it is not expecting a proposal
| for transport mode IPsec with L2TP inside, rather than tunnel mode IPsec?
| 
| That would explain why there were no matching Phase 2 proposals, and I wouldn't
| be terribly surprised, in that case, if your Phase 1 up script weren't called.

If it is L2TP just follow this:

https://wiki.netbsd.org/tutorials/how_to_create_an_l2tp_ipsec_tunnel_between_an_android_or_iphone_or_ios_device_to_netbsd/