{"action":"created","issue":{"url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/76","repository_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp","labels_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/76/labels{/name}","comments_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/76/comments","events_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/76/events","html_url":"https://github.com/nm-l2tp/network-manager-l2tp/issues/76","id":296290200,"number":76,"title":"linuxmint 18.2 connect issue with VyOS as server","user":{"login":"mandeler","id":25322581,"avatar_url":"https://avatars3.githubusercontent.com/u/25322581?v=4","gravatar_id":"","url":"https://api.github.com/users/mandeler","html_url":"https://github.com/mandeler","followers_url":"https://api.github.com/users/mandeler/followers","following_url":"https://api.github.com/users/mandeler/following{/other_user}","gists_url":"https://api.github.com/users/mandeler/gists{/gist_id}","starred_url":"https://api.github.com/users/mandeler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mandeler/subscriptions","organizations_url":"https://api.github.com/users/mandeler/orgs","repos_url":"https://api.github.com/users/mandeler/repos","events_url":"https://api.github.com/users/mandeler/events{/privacy}","received_events_url":"https://api.github.com/users/mandeler/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"dkosovic","id":2002761,"avatar_url":"https://avatars0.githubusercontent.com/u/2002761?v=4","gravatar_id":"","url":"https://api.github.com/users/dkosovic","html_url":"https://github.com/dkosovic","followers_url":"https://api.github.com/users/dkosovic/followers","following_url":"https://api.github.com/users/dkosovic/following{/other_user}","gists_url":"https://api.github.com/users/dkosovic/gists{/gist_id}","starred_url":"https://api.github.com/users/dkosovic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkosovic/subscriptions","organizations_url":"https://api.github.com/users/dkosovic/orgs","repos_url":"https://api.github.com/users/dkosovic/repos","events_url":"https://api.github.com/users/dkosovic/events{/privacy}","received_events_url":"https://api.github.com/users/dkosovic/received_events","type":"User","site_admin":false},"assignees":[{"login":"dkosovic","id":2002761,"avatar_url":"https://avatars0.githubusercontent.com/u/2002761?v=4","gravatar_id":"","url":"https://api.github.com/users/dkosovic","html_url":"https://github.com/dkosovic","followers_url":"https://api.github.com/users/dkosovic/followers","following_url":"https://api.github.com/users/dkosovic/following{/other_user}","gists_url":"https://api.github.com/users/dkosovic/gists{/gist_id}","starred_url":"https://api.github.com/users/dkosovic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkosovic/subscriptions","organizations_url":"https://api.github.com/users/dkosovic/orgs","repos_url":"https://api.github.com/users/dkosovic/repos","events_url":"https://api.github.com/users/dkosovic/events{/privacy}","received_events_url":"https://api.github.com/users/dkosovic/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2018-02-12T07:56:39Z","updated_at":"2018-02-26T00:31:57Z","closed_at":"2018-02-26T00:31:57Z","author_association":"NONE","body":"When connecting from Linuxmint 18.2 to VyOS l2tp/ipsec server;(3des-sha1-modp-1024/3des-sha1). The connection failed.\r\nVersion:\r\n## network-manager-l2tp ----> 1.2.8-1~ubuntu16.04.1~ppa1 \r\n## xl2tpd ----> 1.3.6+dfsg-4ubuntu0.16.04.1\r\n## strongswan-ike ----> 5.3.5-1ubuntu3.5\r\nL2tp installed using compiling, strong swan installed from linuxmint package market;\r\nRun \"sudo /usr/lib/NetworkManager/nm-l2tp-service --debug\", and you can get the information below.\r\n1. Strong swan ipsec tunnel is created.\r\n2. \"pppd timeout. looks like pppd didn't initialize our dbus module\"\r\nAfter quite a lot of time searching, I disabled xl2tpd and manually filled in the Advanced config of VPN setting. But won't work. Then I saw a blog talking about the ubuntu l2tp server iptables issue. Then I go ahead and check my configuration in VyOS. And find that fro udp port 1701, there is a config \"set firewall name OUTSIDE-LOCAL rule 43 ipsec 'match-ipsec'\". After I deleted this line, my client can finnally connect to my VyOS server. \r\nI can not figure out why because My phones(Android and Iphone) and Windows can all connect without issue."},"comment":{"url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/comments/368360151","html_url":"https://github.com/nm-l2tp/network-manager-l2tp/issues/76#issuecomment-368360151","issue_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/76","id":368360151,"user":{"login":"mandeler","id":25322581,"avatar_url":"https://avatars3.githubusercontent.com/u/25322581?v=4","gravatar_id":"","url":"https://api.github.com/users/mandeler","html_url":"https://github.com/mandeler","followers_url":"https://api.github.com/users/mandeler/followers","following_url":"https://api.github.com/users/mandeler/following{/other_user}","gists_url":"https://api.github.com/users/mandeler/gists{/gist_id}","starred_url":"https://api.github.com/users/mandeler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mandeler/subscriptions","organizations_url":"https://api.github.com/users/mandeler/orgs","repos_url":"https://api.github.com/users/mandeler/repos","events_url":"https://api.github.com/users/mandeler/events{/privacy}","received_events_url":"https://api.github.com/users/mandeler/received_events","type":"User","site_admin":false},"created_at":"2018-02-26T00:31:57Z","updated_at":"2018-02-26T00:31:57Z","author_association":"NONE","body":"Hi, dkosovic, sorry for the delay of response.Thank you for your replying. \r\n1.I did check the stopping of xl2tpd because I disabled the service and stopped it the same time.\r\nAlso I think the p1 and p2 algorithm is not the cause of former issue because by default VyOS will allow different combinations of p1/p2 algorithms. And the firewall configuration is to allow any source port to 1701 destination port, which in my case is the listening port of vpn service.\r\n2.To make it brief, just as what is written in the first place, after I deleted \"set firewall name OUTSIDE-LOCAL rule 43 ipsec 'match-ipsec\" in VyOS, Eerything goes fine. I don't know the true reason or mechanism behind this, but this deletion works when it comes to VyOS. Just in case anyone else would encounter this problem when referring to VyOS Official Guide to configure l2tp/ipsec vpn. "}}
{"actor":{"display_login":"mandeler"}}