Dear All, I have configured openswan+xl2tp+radius. If i run xl2tpd without radius authentication, it works fine. But while configure with radius authentication , it failes. Following are my configureations. ipsec.conf ------------------------------------- config setup protostack=netkey nat_traversal=yes virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12 oe=off conn L2TP-PSK-NAT rightsubnet=vhost:%priv also=L2TP-PSK-noNAT conn L2TP-PSK-noNAT authby=secret pfs=no auto=add keyingtries=3 rekey=no ikelifetime=8h type=transport left=Server-IP leftprotoport=17/1701 right=%any rightprotoport=17/%any ------------------------------ xl2tpd.conf ------------------------------------------------------- [global] listen-addr = Server-IP force userspace = yes [lns default] ip range = 192.168.8.2-192.168.8.254 local ip = 192.168.8.1 require chap = yes refuse pap = yes require authentication = yes name = xl2tpd ppp debug = yes pppoptfile = /etc/ppp/options.xl2tpd length bit = yes -------------------------------------------------------- name xl2tpd require-mschap-v2 auth ms-dns 8.8.8.8 ms-dns 8.8.4.4 nodefaultroute idle 1800 debug lock nobsdcomp novj novjccomp nologfd lcp-echo-interval 5 lcp-echo-failure 5 proxyarp connect-delay 5000 plugin radius.so plugin radattr.so radius-config-file /etc/radiusclient/radiusclient.conf -------------------------------------- the logfile: ------------------ Dec 5 03:36:43 vpn2 xl2tpd[22927]: Connection established to IP, 1701. Local: 23899, Remote: 18 (ref=0/0). LNS session is 'default' Dec 5 03:36:43 vpn2 xl2tpd[22927]: Call established with IP, Local: 30311, Remote: 1, Serial: 0 Dec 5 03:36:43 vpn2 pppd[23048]: Plugin radius.so loaded. Dec 5 03:36:43 vpn2 pppd[23048]: RADIUS plugin initialized. Dec 5 03:36:43 vpn2 pppd[23048]: Plugin radattr.so loaded. Dec 5 03:36:43 vpn2 pppd[23048]: RADATTR plugin initialized. Dec 5 03:36:43 vpn2 pppd[23048]: pppd 2.4.5 started by root, uid 0 Dec 5 03:36:43 vpn2 pppd[23048]: Using interface ppp0 Dec 5 03:36:43 vpn2 pppd[23048]: Connect: ppp0 <--> /dev/pts/1 Dec 5 03:36:47 vpn2 pppd[23048]: rc_avpair_new: unknown attribute 60 Dec 5 03:36:48 vpn2 pppd[23048]: Peer xul2tp failed CHAP authentication Dec 5 03:36:48 vpn2 pppd[23048]: Connection terminated. Dec 5 03:36:48 vpn2 pppd[23048]: Exit. Dec 5 03:36:48 vpn2 xl2tpd[22927]: call_close: Call 30311 to IP disconnected Dec 5 03:36:48 vpn2 xl2tpd[22927]: control_finish: Connection closed to IP, serial 0 () Dec 5 03:36:48 vpn2 xl2tpd[22927]: control_finish: Connection closed to IP, port 1701 (), Local: 23899, Remote: 18 There is no errors for my radius configuration. What's more ,the pptp with my radius works fine, only the xl2tpd failes. Anyone can help me? Thanks. -- Best regards,
How stupid i am! I have found the problem and solved it. In my xl2tpd.conf ,it should be "refuse chap = yes". Thanks for all.
participants (1)
-
Xu Tingting