https://www.opennet.me/openforum/vsluhforumID1/92009.html после запуска ipsec<br><br>000 "vpn2uz-xl2tp-transport": 192.168.10.101[192.168.10.101]:17/0...195.149.70.70[195.149.70.70]:17/1701; unrouted; eroute owner: #0<br>000 "vpn2uz-xl2tp-transport": newest ISAKMP SA: #0; newest IPsec SA: #0; <br>000 <br>000 #1: "vpn2uz-xl2tp-transport" STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 6s<br>000 #1: pending Phase 2 for "vpn2uz-xl2tp-transport" replacing #0<br>000 <br><br>ipsec.conf<br># /etc/ipsec/ipsec.conf - vpn2.uz.gov.ua Openswan IPsec configuration file<br># This file was created by openswan-vpn2uz.sh script<br>#<br># Manual: ipsec.conf.5<br><br># conforms to second version of ipsec.conf specification<br>version 2.0<br><br># basic configuration<br>config setup<br> protostack=netkey<br> oe=no<br> plutoopts="--interface=eth0"<br>conn L2TP-PSK<br> authby=secret<br> pfs=no<br> auto=add<br> keyingtries=3<br> dpddelay=30<br> dpdtimeout=120<br> dpdaction=clear<br> rekey=yes<br> ikelifetime=8h<br> keylife=1h<br> type=transport<br> nat_traversal=yes<br> <br> <br># vpn2uz xl2tp https://www.opennet.me/openforum/vsluhforumID1/92009.html#1 Fri, 29 Jul 2011 22:49:20 GMT Рабочий конфиг<br>по ссылке.<br>возможно подойдет<br><br>&lt;a href="http://www.agetech.ru/post/181#more-181"&gt;http://www.agetech.ru/post/181#more-181&lt;/a&gt;<br><br>&gt;[оверквотинг удален]<br>&gt; keylife=1h <br>&gt; type=transport <br>&gt; nat_traversal=yes <br>&gt; # vpn2uz xl2tp <br>&gt; conn vpn2uz-xl2tp-transport <br>&gt; left=192.168.10.101 <br>&gt; leftnexthop=%defaultroute <br>&gt; leftprotoport=17/1701 <br>&gt; right=vpn2.uz.gov.ua <br>&gt; rightprotoport=17/1701 <br><br>