{"action":"created","issue":{"url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn/issues/72","repository_url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn","labels_url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn/issues/72/labels{/name}","comments_url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn/issues/72/comments","events_url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn/issues/72/events","html_url":"https://github.com/hwdsl2/setup-ipsec-vpn/issues/72","id":183844720,"number":72,"title":"xl2tpd[1]: setsockopt recvref[30]: Protocol not available","user":{"login":"kanlidy","id":5557262,"avatar_url":"https://avatars.githubusercontent.com/u/5557262?v=3","gravatar_id":"","url":"https://api.github.com/users/kanlidy","html_url":"https://github.com/kanlidy","followers_url":"https://api.github.com/users/kanlidy/followers","following_url":"https://api.github.com/users/kanlidy/following{/other_user}","gists_url":"https://api.github.com/users/kanlidy/gists{/gist_id}","starred_url":"https://api.github.com/users/kanlidy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kanlidy/subscriptions","organizations_url":"https://api.github.com/users/kanlidy/orgs","repos_url":"https://api.github.com/users/kanlidy/repos","events_url":"https://api.github.com/users/kanlidy/events{/privacy}","received_events_url":"https://api.github.com/users/kanlidy/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-10-19T01:37:55Z","updated_at":"2016-10-21T08:09:59Z","closed_at":"2016-10-19T01:44:43Z","body":"Follow your instruction, run `docker run` command, I got this:\r\n\r\n    IPsec VPN server is now ready for use!\r\n\r\n    Connect to your new VPN with these details:\r\n\r\n    Server IP: xxx.xxx.xxx.xxx\r\n    IPsec PSK: ********\r\n    Users credentials :\r\n    Login : ******** Password : ********\r\n    Login : ******** Password : ********\r\n\r\n    Write these down. You'll need them to connect!\r\n\r\n    Setup VPN Clients: https://git.io/vpnclients\r\n\r\n    ================================================\r\n\r\n    Redirecting to: /etc/init.d/ipsec start\r\n    Starting pluto IKE daemon for IPsec: .\r\n    xl2tpd[1]: setsockopt recvref[30]: Protocol not available\r\n    xl2tpd[1]: This binary does not support kernel L2TP.\r\n    xl2tpd[1]: xl2tpd version xl2tpd-1.3.6 started on 2ccff18b3002 PID:1\r\n    xl2tpd[1]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.\r\n    xl2tpd[1]: Forked by Scott Balmos and David Stipp, (C) 2001\r\n    xl2tpd[1]: Inherited by Jeff McAdams, (C) 2002\r\n    xl2tpd[1]: Forked again by Xelerance (www.xelerance.com) (C) 2006\r\n    xl2tpd[1]: Listening on IP address 0.0.0.0, port 1701\r\n\r\nDocker status:\r\n\r\n    000 using kernel interface: netkey\r\n    000 interface lo/lo ::1@500\r\n    000 interface lo/lo 127.0.0.1@4500\r\n    000 interface lo/lo 127.0.0.1@500\r\n    000 interface eth0/eth0 172.17.0.3@4500\r\n    000 interface eth0/eth0 172.17.0.3@500\r\n    000  \r\n    000  \r\n    000 fips mode=disabled;\r\n    000 SElinux=disabled\r\n    000  \r\n    000 config setup options:\r\n    000  \r\n    000 configdir=/etc, configfile=/etc/ipsec.conf, secrets=/etc/ipsec.secrets, ipsecdir=/etc/ipsec.d, dumpdir=/var/run/pluto, statsbin=unset\r\n    000 sbindir=/usr/local/sbin, libexecdir=/usr/local/libexec/ipsec\r\n    000 pluto_version=3.17, pluto_vendorid=OE-Libreswan-3.17\r\n    000 nhelpers=0, uniqueids=no, perpeerlog=no, shuntlifetime=900s, xfrmlifetime=300s\r\n    000 ddos-cookies-treshold=50000, ddos-max-halfopen=25000, ddos-mode=auto\r\n    000 ikeport=500, strictcrlpolicy=no, crlcheckinterval=0, listen=<any>, nflog-all=0\r\n    000 secctx-attr-type=<unsupported>\r\n    000 myid = (none)\r\n    000 debug none\r\n    000  \r\n    000 nat-traversal=yes, keep-alive=20, nat-ikeport=4500\r\n    000 virtual-private (%priv):\r\n    000 - allowed subnets: 10.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12\r\n    000 - excluded subnet: 192.168.42.0/23\r\n    000  \r\n    000 ESP algorithms supported:\r\n    000  \r\n    000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192\r\n    000 algorithm ESP encrypt: id=6, name=ESP_CAST, ivlen=8, keysizemin=128, keysizemax=128\r\n    000 algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0\r\n    000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=13, name=ESP_AES_CTR, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=14, name=ESP_AES_CCM_A, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=15, name=ESP_AES_CCM_B, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=16, name=ESP_AES_CCM_C, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=18, name=ESP_AES_GCM_A, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=19, name=ESP_AES_GCM_B, ivlen=12, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=20, name=ESP_AES_GCM_C, ivlen=16, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=22, name=ESP_CAMELLIA, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256\r\n    000 algorithm AH/ESP auth: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128\r\n    000 algorithm AH/ESP auth: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160\r\n    000 algorithm AH/ESP auth: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256\r\n    000 algorithm AH/ESP auth: id=6, name=AUTH_ALGORITHM_HMAC_SHA2_384, keysizemin=384, keysizemax=384\r\n    000 algorithm AH/ESP auth: id=7, name=AUTH_ALGORITHM_HMAC_SHA2_512, keysizemin=512, keysizemax=512\r\n    000 algorithm AH/ESP auth: id=8, name=AUTH_ALGORITHM_HMAC_RIPEMD, keysizemin=160, keysizemax=160\r\n    000 algorithm AH/ESP auth: id=9, name=AUTH_ALGORITHM_AES_XCBC, keysizemin=128, keysizemax=128\r\n    000 algorithm AH/ESP auth: id=251, name=AUTH_ALGORITHM_NULL_KAME, keysizemin=0, keysizemax=0\r\n    000  \r\n    000 IKE algorithms supported:\r\n    000  \r\n    000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=16, v2name=AES_CCM_C, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=15, v2name=AES_CCM_B, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=0, v1name=0??, v2id=14, v2name=AES_CCM_A, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=5, v1name=OAKLEY_3DES_CBC, v2id=3, v2name=3DES, blocksize=8, keydeflen=192\r\n    000 algorithm IKE encrypt: v1id=24, v1name=OAKLEY_CAMELLIA_CTR, v2id=24, v2name=CAMELLIA_CTR, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=8, v1name=OAKLEY_CAMELLIA_CBC, v2id=23, v2name=CAMELLIA_CBC, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=20, v1name=OAKLEY_AES_GCM_C, v2id=20, v2name=AES_GCM_C, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=19, v1name=OAKLEY_AES_GCM_B, v2id=19, v2name=AES_GCM_B, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=18, v1name=OAKLEY_AES_GCM_A, v2id=18, v2name=AES_GCM_A, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=13, v1name=OAKLEY_AES_CTR, v2id=13, v2name=AES_CTR, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=7, v1name=OAKLEY_AES_CBC, v2id=12, v2name=AES_CBC, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=65004, v1name=OAKLEY_SERPENT_CBC, v2id=65004, v2name=SERPENT_CBC, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=65005, v1name=OAKLEY_TWOFISH_CBC, v2id=65005, v2name=TWOFISH_CBC, blocksize=16, keydeflen=128\r\n    000 algorithm IKE encrypt: v1id=65289, v1name=OAKLEY_TWOFISH_CBC_SSH, v2id=65289, v2name=TWOFISH_CBC_SSH, blocksize=16, keydeflen=128\r\n    000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashlen=16\r\n    000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashlen=20\r\n    000 algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashlen=32\r\n    000 algorithm IKE hash: id=5, name=OAKLEY_SHA2_384, hashlen=48\r\n    000 algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashlen=64\r\n    000 algorithm IKE hash: id=9, name=DISABLED-OAKLEY_AES_XCBC, hashlen=16\r\n    000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024\r\n    000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536\r\n    000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048\r\n    000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072\r\n    000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096\r\n    000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144\r\n    000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192\r\n    000 algorithm IKE dh group: id=22, name=OAKLEY_GROUP_DH22, bits=1024\r\n    000 algorithm IKE dh group: id=23, name=OAKLEY_GROUP_DH23, bits=2048\r\n    000 algorithm IKE dh group: id=24, name=OAKLEY_GROUP_DH24, bits=2048\r\n    000  \r\n    000 stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0} \r\n    000  \r\n    000 Connection list:\r\n    000  \r\n    000 \"l2tp-psk\": 172.17.0.3/32===172.17.0.3<172.17.0.3>[xxx.xxx.xxx.xxx]:17/1701---172.17.0.1...%any:17/%any; unrouted; eroute owner: #0\r\n    000 \"l2tp-psk\":     oriented; my_ip=unset; their_ip=unset\r\n    000 \"l2tp-psk\":   xauth us:none, xauth them:none,  my_username=[any]; their_username=[any]\r\n    000 \"l2tp-psk\":   modecfg info: us:none, them:none, modecfg policy:push, dns1:unset, dns2:unset, domain:unset, banner:unset;\r\n    000 \"l2tp-psk\":   labeled_ipsec:no;\r\n    000 \"l2tp-psk\":   policy_label:unset;\r\n    000 \"l2tp-psk\":   ike_life: 3600s; ipsec_life: 28800s; replay_window: 32; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3;\r\n    000 \"l2tp-psk\":   retransmit-interval: 500ms; retransmit-timeout: 60s;\r\n    000 \"l2tp-psk\":   sha2_truncbug:no; initial_contact:no; cisco_unity:no; fake_strongswan:no; send_vendorid:no;\r\n    000 \"l2tp-psk\":   policy: PSK+ENCRYPT+DONT_REKEY+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO;\r\n    000 \"l2tp-psk\":   conn_prio: 32,32; interface: eth0; metric: 0; mtu: unset; sa_prio:auto; nflog-group: unset; mark: unset;\r\n    000 \"l2tp-psk\":   dpd: action:clear; delay:15; timeout:30; nat-t: force_encaps:yes; nat_keepalive:yes; ikev1_natt:both\r\n    000 \"l2tp-psk\":   newest ISAKMP SA: #0; newest IPsec SA: #0;\r\n    000 \"l2tp-psk\":   IKE algorithms wanted: 3DES_CBC(5)_000-SHA1(2)_000-MODP2048(14), 3DES_CBC(5)_000-SHA1(2)_000-MODP1536(5), 3DES_CBC(5)_000-SHA1(2)_000-MODP1024(2), AES_CBC(7)_000-SHA1(2)_000-MODP2048(14), AES_CBC(7)_000-SHA1(2)_000-MODP1536(5), AES_CBC(7)_000-SHA1(2)_000-MODP1024(2)\r\n    000 \"l2tp-psk\":   IKE algorithms found:  3DES_CBC(5)_192-SHA1(2)_160-MODP2048(14), 3DES_CBC(5)_192-SHA1(2)_160-MODP1536(5), 3DES_CBC(5)_192-SHA1(2)_160-MODP1024(2), AES_CBC(7)_128-SHA1(2)_160-MODP2048(14), AES_CBC(7)_128-SHA1(2)_160-MODP1536(5), AES_CBC(7)_128-SHA1(2)_160-MODP1024(2)\r\n    000 \"l2tp-psk\":   ESP algorithms wanted: 3DES(3)_000-SHA1(2)_000, AES(12)_000-SHA1(2)_000\r\n    000 \"l2tp-psk\":   ESP algorithms loaded: 3DES(3)_000-SHA1(2)_000, AES(12)_000-SHA1(2)_000\r\n    000 \"xauth-psk\": 0.0.0.0/0===172.17.0.3<172.17.0.3>[xxx.xxx.xxx.xxx,MS+XS+S=C]...%any[+MC+XC+S=C]; unrouted; eroute owner: #0\r\n    000 \"xauth-psk\":     oriented; my_ip=unset; their_ip=unset\r\n    000 \"xauth-psk\":   xauth us:server, xauth them:client, xauthby:file; my_username=[any]; their_username=[any]\r\n    000 \"xauth-psk\":   modecfg info: us:server, them:client, modecfg policy:pull, dns1:8.8.8.8, dns2:8.8.4.4, domain:unset, banner:unset;\r\n    000 \"xauth-psk\":   labeled_ipsec:no;\r\n    000 \"xauth-psk\":   policy_label:unset;\r\n    000 \"xauth-psk\":   ike_life: 3600s; ipsec_life: 28800s; replay_window: 32; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3;\r\n    000 \"xauth-psk\":   retransmit-interval: 500ms; retransmit-timeout: 60s;\r\n    000 \"xauth-psk\":   sha2_truncbug:no; initial_contact:no; cisco_unity:yes; fake_strongswan:no; send_vendorid:no;\r\n    000 \"xauth-psk\":   policy: PSK+ENCRYPT+TUNNEL+DONT_REKEY+XAUTH+MODECFG_PULL+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO;\r\n    000 \"xauth-psk\":   conn_prio: 0,32; interface: eth0; metric: 0; mtu: unset; sa_prio:auto; nflog-group: unset; mark: unset;\r\n    000 \"xauth-psk\":   dpd: action:clear; delay:15; timeout:30; nat-t: force_encaps:yes; nat_keepalive:yes; ikev1_natt:both\r\n    000 \"xauth-psk\":   newest ISAKMP SA: #0; newest IPsec SA: #0;\r\n    000 \"xauth-psk\":   IKE algorithms wanted: 3DES_CBC(5)_000-SHA1(2)_000-MODP2048(14), 3DES_CBC(5)_000-SHA1(2)_000-MODP1536(5), 3DES_CBC(5)_000-SHA1(2)_000-MODP1024(2), AES_CBC(7)_000-SHA1(2)_000-MODP2048(14), AES_CBC(7)_000-SHA1(2)_000-MODP1536(5), AES_CBC(7)_000-SHA1(2)_000-MODP1024(2)\r\n    000 \"xauth-psk\":   IKE algorithms found:  3DES_CBC(5)_192-SHA1(2)_160-MODP2048(14), 3DES_CBC(5)_192-SHA1(2)_160-MODP1536(5), 3DES_CBC(5)_192-SHA1(2)_160-MODP1024(2), AES_CBC(7)_128-SHA1(2)_160-MODP2048(14), AES_CBC(7)_128-SHA1(2)_160-MODP1536(5), AES_CBC(7)_128-SHA1(2)_160-MODP1024(2)\r\n    000 \"xauth-psk\":   ESP algorithms wanted: 3DES(3)_000-SHA1(2)_000, AES(12)_000-SHA1(2)_000\r\n    000 \"xauth-psk\":   ESP algorithms loaded: 3DES(3)_000-SHA1(2)_000, AES(12)_000-SHA1(2)_000\r\n    000  \r\n    000 Total IPsec connections: loaded 2, active 0\r\n    000  \r\n    000 State Information: DDoS cookies not required, Accepting new IKE connections\r\n    000 IKE SAs: total(0), half-open(0), open(0), authenticated(0), anonymous(0)\r\n    000 IPsec SAs: total(0), authenticated(0), anonymous(0)\r\n    000  \r\n    000 Bare Shunt list:\r\n    000  \r\n\r\n\r\nI try to solve this problem by install `apt install strongswan-starter` and this is my ipsec version:\r\n\r\n    root@ubuntu:~# ipsec --version\r\n    Linux strongSwan U5.3.5/K4.4.0-21-generic\r\n    Institute for Internet Technologies and Applications\r\n    University of Applied Sciences Rapperswil, Switzerland\r\n    See 'ipsec --copyright' for copyright information.\r\n\r\n\r\nDocker version:\r\n\r\n    root@ubuntu:~# docker --version\r\n    Docker version 1.12.1, build 23cf638\r\n\r\nUbuntu version:\r\n\r\n    root@ubuntu:~# uname -a\r\n    Linux ubuntu 4.4.0-21-generic #37-Ubuntu SMP Mon Apr 18 18:33:37 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn/issues/comments/255320713","html_url":"https://github.com/hwdsl2/setup-ipsec-vpn/issues/72#issuecomment-255320713","issue_url":"https://api.github.com/repos/hwdsl2/setup-ipsec-vpn/issues/72","id":255320713,"user":{"login":"kanlidy","id":5557262,"avatar_url":"https://avatars.githubusercontent.com/u/5557262?v=3","gravatar_id":"","url":"https://api.github.com/users/kanlidy","html_url":"https://github.com/kanlidy","followers_url":"https://api.github.com/users/kanlidy/followers","following_url":"https://api.github.com/users/kanlidy/following{/other_user}","gists_url":"https://api.github.com/users/kanlidy/gists{/gist_id}","starred_url":"https://api.github.com/users/kanlidy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kanlidy/subscriptions","organizations_url":"https://api.github.com/users/kanlidy/orgs","repos_url":"https://api.github.com/users/kanlidy/repos","events_url":"https://api.github.com/users/kanlidy/events{/privacy}","received_events_url":"https://api.github.com/users/kanlidy/received_events","type":"User","site_admin":false},"created_at":"2016-10-21T08:09:59Z","updated_at":"2016-10-21T08:09:59Z","body":"@hwdsl2 Use your latest images, I connected fine, it works. \r\n\r\nHere's my problem:\r\n\r\n1. Is it possible to change port from 500,4500 to other port? Like: xxx.xxx.com:14005,xxx.xxx.com:14006\r\n\r\n2. How to add more people to my services? As you mentioned in [https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/5](https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/5), is there any convenient way to add users in vpn.env file, or command line?\r\n\r\n"}}
{"actor":{"display_login":"kanlidy"}}