Arch Linux

Dragomundo

Member

Registered: 2018-10-02

Posts: 4

How to connect to external VPN server for school?

Okay so I'm using openswan and l2tp/IPSec to try and connect to my schools vpn(also type L2TP/IPSec). (required for use of SQL Developer)
I don't know what anything means so please help

here is my /etc/ipsec.conf

config setup
     virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
     nat_traversal=yes
# default is auto, which will try netkey first
     protostack=netkey
# you can left "off" (default value) instead
     oe=no
# Replace eth0 with your network interface
     plutoopts="--interface=enp30s0"
conn L2TP-PSK
     authby=secret
     pfs=no
     auto=add
     keyingtries=3
     dpddelay=30
     dpdtimeout=120
     dpdaction=clear
     rekey=yes
     ikelifetime=8h
     keylife=1h
     type=transport
# Replace %any below with your local IP address (private, behind NAT IP is okay as well)
     left=**************
     leftprotoport=17/1701
# Replace IP address with your VPN server's IP
     right=***************
     rightprotoport=17/1701

here is the output of running

ipsec verify

Checking if IPsec got installed and started correctly:

Version check and ipsec on-path                   	[OK]
Openswan U/K4.18.16-arch1-1-ARCH (netkey)
See `ipsec --copyright' for copyright information.
Checking for IPsec support in kernel              	[OK]
 NETKEY: Testing XFRM related proc values
         ICMP default/send_redirects              	        [OK]
         ICMP default/accept_redirects            	[OK]
         XFRM larval drop                         	        [OK]
Hardware random device check                      	[N/A]
Checking rp_filter                                	        [ENABLED]
 /proc/sys/net/ipv4/conf/all/rp_filter            	        [ENABLED]
Checking that pluto is running                    	        [OK]
 Pluto listening for IKE on udp 500               	[OK]
 Pluto listening for IKE on tcp 500               	        [NOT IMPLEMENTED]
 Pluto listening for IKE/NAT-T on udp 4500        	[DISABLED]
 Pluto listening for IKE/NAT-T on tcp 4500        	[NOT IMPLEMENTED]
 Pluto listening for IKE on tcp 10000 (cisco)     	[NOT IMPLEMENTED]
Checking NAT and MASQUERADEing                    	[TEST INCOMPLETE]
Checking 'ip' command                             	        [OK]
Checking 'iptables' command                       	[OK]

ipsec verify: encountered errors

also when i try to run

sudo ipsec auto --up L2TP-PSK

i get

022 "L2TP-PSK": We cannot identify ourselves with either end of this connection

any ideas on what to do next?

Last edited by Dragomundo (2018-11-01 15:36:33)

kgizdov

Package Maintainer (PM)

From: Edinburgh, UK

Registered: 2015-12-08

Posts: 113

Re: How to connect to external VPN server for school?

What is your network manager? Have you configured your preshared key correctly - L2TP-PSK?

There are a few other questions on this topic that have been answered, e.g.:
https://bbs.archlinux.org/viewtopic.php?id=232659
https://bbs.archlinux.org/viewtopic.php?id=235134
...
Do any of them help?