<div dir="ltr">Hey guys! Happy New Year!<div><br></div><div>Got a bit of a problem with android and I wondered if you could help please?</div><div><br></div><div>My L2TP IPSec vpn using PSK is connecting fine on my desktop and laptops - it connects without any issues, however as soon as I try to connect my xperia z running android 4.2.2 it wont connect. Running cat /var/log/auth.log produces the following output:</div>
<div><br></div><div><div>Jan 3 17:29:37 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #12: OAKLEY_DES_CBC is not supported. Attrib</div><div>Jan 3 17:29:37 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #12: OAKLEY_DES_CBC is not supported. Attrib</div>
<div>Jan 3 17:29:37 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #12: OAKLEY_DES_CBC is not supported. Attrib</div><div>Jan 3 17:29:37 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #12: no acceptable Oakley Transform</div>
<div>Jan 3 17:29:37 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #12: sending notification NO_PROPOSAL_CHOSEN</div><div>Jan 3 17:30:24 localhost pluto[6111]: packet from <a href="http://92.17.213.37:500">92.17.213.37:500</a>: received Vendor ID payload [RFC 3947] method s</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: packet from <a href="http://92.17.213.37:500">92.17.213.37:500</a>: received Vendor ID payload [draft-ietf-ipsec-n</div><div>Jan 3 17:30:24 localhost pluto[6111]: packet from <a href="http://92.17.213.37:500">92.17.213.37:500</a>: received Vendor ID payload [draft-ietf-ipsec-n</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: packet from <a href="http://92.17.213.37:500">92.17.213.37:500</a>: received Vendor ID payload [draft-ietf-ipsec-n</div><div>Jan 3 17:30:24 localhost pluto[6111]: packet from <a href="http://92.17.213.37:500">92.17.213.37:500</a>: ignoring Vendor ID payload [FRAGMENTATION 8000</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: packet from <a href="http://92.17.213.37:500">92.17.213.37:500</a>: received Vendor ID payload [Dead Peer Detectio</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: responding to Main Mode from unknown pee</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: OAKLEY_SHA2_256 is not supported. Attri</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: transition from state STATE_MAIN_R0 to s</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: STATE_MAIN_R1: sent MR1, expecting MI2</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: NAT-Traversal: Result using RFC 3947 (NA</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: transition from state STATE_MAIN_R1 to s</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: STATE_MAIN_R2: sent MR2, expecting MI3</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: Main mode peer ID is ID_IPV4_ADDR: '192.</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: transition from state STATE_MAIN_R2 to s</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: new NAT mapping for #13, was 92.17.213.3</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: STATE_MAIN_R3: sent MR3, ISAKMP SA estaboup=modp1024}</div>
<div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: ignoring informational payload, type IPS</div><div>Jan 3 17:30:24 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: received and ignored informational messa</div>
<div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #13: the peer proposed: <a href="http://162.243.11.193/32:17/">162.243.11.193/32:17/</a></div><div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: responding to Quick Mode proposal {msgid</div>
<div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: us: 162.243.11.193<162.243.11.193>[+</div><div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: them: 92.17.213.37[192.168.1.100,+S=C]</div>
<div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: keeping refhim=4294901761 during rekey</div><div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: transition from state STATE_QUICK_R0 to</div>
<div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: STATE_QUICK_R1: sent QR1, inbound IPsec</div><div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: netlink_raw_eroute: WARNING: that_clientt.</div>
<div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: transition from state STATE_QUICK_R1 to</div><div>Jan 3 17:30:25 localhost pluto[6111]: "L2TP-PSK-NAT"[2] 92.17.213.37 #14: STATE_QUICK_R2: IPsec SA established tra6 NATOA=none NATD=<a href="http://92.17.213.37:4500">92.17.213.37:4500</a> DPD=none}</div>
</div><div><br></div><div><br></div><div>Can anyone shed any light as to the problem and possible fix please?</div><div><br></div><div>Cheers</div><div><br></div><div>Andy</div></div>