openswan fails to establish phase1 with l2tpd after update
Issue
After applying RHSA-2014:0185, a connection to a NATed Windows XP client using L2TP-IPsec cannot be established.
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: responding to Main Mode from unknown peer X.X.X.X
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: STATE_MAIN_R1: sent MR1, expecting MI2
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: next payload type of ISAKMP Nonce Payload has an unknown value: 130
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: malformed payload in packet
pluto[7581]: | payload malformed after IV
pluto[7581]: |
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: sending notification PAYLOAD_MALFORMED to X.X.X.X:500
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: next payload type of ISAKMP Nonce Payload has an unknown value: 130
pluto[7581]: "L2TP-PSK-NAT-NET"[1] X.X.X.X #1: malformed payload in packet
Environment
- Red Hat Enterprise Linux 6
- openswan-2.6.32-27.2.el6_5
- L2TP-IPsec connection
- Windows XP client behind NAT
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
