Hi!

I have a basic 'internet gateway setup' running on Vytta 6. It's purpose is to have iOS friendly VPN remote access, that I am tackling now.

Part of the setup works (ie: I can see a connection created both with PPTP as well as with L2TP/IPSec).

The point is getting packets passed over the link !! Right now, there is no traffic, at all.

To try to get some facts I tried connecting to Vyatta machine from a Mac laptop: and see what ifconfig sees.

L2TP Link:
ppp0: flags=8051 mtu 1280
inet 192.168.10.20 --> 10.255.255.0 netmask 0xffffff00

PPTP Link:
ppp0: flags=8051 mtu 1444
inet 10.10.10.10 --> 10.255.254.0 netmask 0xff000000

Now, even if I am a newbie, I guess that this is not going to work...

This is the VPN config morcel:

  vpn {
      ipsec {
          esp-group ESP-1W {
              compression disable
              lifetime 3600
              mode tunnel
              pfs enable
              proposal 1 {
                  encryption 3des
                  hash sha1
              }
              proposal 2 {
                  encryption aes128
                  hash sha1
              }
          }
          ike-group IKE-1W {
              lifetime 28800
              proposal 1 {
                  encryption 3des
                  hash sha1
              }
              proposal 2 {
                  encryption aes128
                  hash sha1
              }
          }
          ipsec-interfaces {
              interface eth1
          }
          nat-networks {
              allowed-network 0.0.0.0/0 {
                  exclude 192.168.10.0/24
              }
          }
          nat-traversal enable
      }
      l2tp {
          remote-access {
              authentication {
                  local-users {
                      username aaberga {
                          password "***************"
                      }
                  }
                  mode local
              }
              client-ip-pool {
                  start 192.168.10.20
                  stop 192.168.10.29
              }
              dns-servers {
                  server-1 208.67.222.222
              }
              ipsec-settings {
                  authentication {
                      mode pre-shared-secret
                      pre-shared-secret ******************
                  }
              }
              outside-address x.y.135.229
              outside-nexthop x.y.135.225
          }
      }
      pptp {
          remote-access {
              authentication {
                  local-users {
                      username aaberga {
                          password **************
                      }
                  }
                  mode local
              }
              client-ip-pool {
                  start 192.168.1.10
                  stop 192.168.1.19
              }
              outside-address x.y.135.229
          }
      }
  }

what is wrong with it?

BTW: At first I had an 'error' in the PPTP config part. The IP-POOL was specified to be in the *same IP range* as the LAN network. This is the only time when I saw a connection 'working'.

I understand that it is wrong; the VPN connection got reset after a few bytes of traffic...

Thanks in advance,
Aldo