Arch Linux

baronmog

Member

Registered: 2013-11-01

Posts: 60

ipsec/l2tp config issue: address family inconsistency in this connecti

I'm following the instructions on the L2TP Wiki page, but get

[root@lur ~]# ipsec auto --add L2TP-Foo
023 address family inconsistency in this connection=2 host=2/nexthop=0
037 attempt to load incomplete connection

The config is

config setup
        plutoopts="--interface=ens9"
        dumpdir=/var/run/pluto/
        nat_traversal=yes
        virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v6:fd00::/8,%v6:fe80::/10
        oe=off
        protostack=auto

# Add connections here
conn L2TP-Foo
     authby=secret
     pfs=no
     auto=add
     keyingtries=3
     dpddelay=30
     dpdtimeout=120
     dpdaction=clear
     rekey=yes
     ikelifetime=8h
     keylife=1h
     type=transport
     # Replace %any below with your local IP address (private, behind NAT IP is okay as well)
     left=192.168.42.193
     leftnexthop=%defaultroute
     leftprotoport=17/1701
     # Replace IP address with your VPN server's IP
     right=50.255.72.17
     rightprotoport=17/1701

Does anyone here know what it's referring to?

In case it's useful:

[root@lur ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: wlp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000
    link/ether b8:e8:56:31:79:3e brd ff:ff:ff:ff:ff:ff
5: ens9: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 68:5b:35:84:8f:85 brd ff:ff:ff:ff:ff:ff
    inet 192.168.42.193/24 brd 192.168.42.255 scope global ens9
       valid_lft forever preferred_lft forever
    inet6 fe80::4f0e:9ce3:f157:54b5/64 scope link 
       valid_lft forever preferred_lft forever

wtz

Member

Registered: 2016-04-18

Posts: 1

Re: ipsec/l2tp config issue: address family inconsistency in this connecti

Remove this line:
plutoopts="--interface=ens9"