Debian 6和OpenSwan不使用iPhone作为客户端。

Question

我刚刚在Debian6.0上安装了OpenSwan，并根据本教程对其进行了配置：http://confoundedtech.blogspot.co.uk/2011/08/android-nexus-one-ipsec-psk-vpn-with.html有许多类似的文档，即使我更改了一些参数，但当我尝试使用L2TP连接作为xl2tpd客户端的Iphone时，总是以xl2tpd的错误结尾：

Apr 22 16:31:25 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 32857, call = 10067 ref=0 refhim=0
Apr 22 16:31:25 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet.  call = 10067, tunnel = 32857 Dumping.
Apr 22 16:37:52 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:37:52 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet.  call = 50076, tunnel = 33015 Dumping.
Apr 22 16:37:54 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:37:54 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet.  call = 50076, tunnel = 33015 Dumping.
Apr 22 16:37:57 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:37:57 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet.  call = 50076, tunnel = 33015 Dumping.
Apr 22 16:38:00 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:38:00 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet.  call = 50076, tunnel = 33015 Dumping.

这是我的xl2tpd配置：

[global]
listen-addr=192.168.0.148
port=1701
debug tunnel=yes
debug avp=yes
debug packet=yes
debug network=yes
debug state=yes

[lns default]
ip range = 192.168.0.220-192.168.0.230
local ip = 192.168.0.148
require chap = yes
require authentication = yes
refuse pap = yes
ppp debug = yes
length bit = yes
pppoptfile = /etc/xl2tpd/ppp-options.xl2tpd

这是我的ppt-options.xl2tpd文件：

ipcp-accept-local
ipcp-accept-remote
noccp
auth
#crtscts
idle 1800
mtu 1410
mru 1410
nodefaultroute
debug
lock
proxyarp
connect-delay 5000
ms-dns 192.168.0.1
#name l2tpd
#lcp-echo-interval 30
#lcp-echo-failure 4
logfile /var/log/ppp.log

这件事把我逼疯了，我在这里错过了什么？

Answer 1

听-地址不应与本地ip相同。

侦听-addr-是连接到LAN/WAN本地ip的主机的物理地址，是主机与虚拟网络连接的虚拟地址。

将两者设置相同可能是隧道问题的根源，