Ubuntu – L2tp/ipsec problem

network-manageropenvpnvpn

I want to connect an Ubuntu client to a VPN server in l2tp/ipsec mode. I used l2tp-ipsec-vpn and network-manager-l2tp on Ubuntu 16 . in 2 cases I get this error : "vpn-connection failed to connect because VPN service fails to start"
Also I used xl2tpd and strongswan and I get the same error
Is there a stable package ( on Ubuntu ot or other distro ) ? If yes can you provide me a link for step by step configuration

Best Answer

The two most likely issues users have with network-manager-l2tp :

  1. Using a VPN server that is using legacy IPsec IKEv1 ciphers that current stable releases of strongswan consider to be broken as they have been cracked:

See the 'IPsec IKEv1 ciphers' section on the following page on how to query your VPN server for a list of supported ciphers and how to specify legacy ciphers in the Phase 1 and Phase 2 algorithm text boxes of the advanced section of the IPsec dialog box.

-

  1. Issue with not stopping system xl2tpd service, see:

If you are having IPsec issues with strongswan and network-manger-l2tp, you could try installing and using libreswan instead with:

sudo apt install libreswan

Also have a look at the following page for other issues:

A backport of network-manager-l2tp packages from Debian Sid and Ubuntu 17.10 (Artful Aardvark) can be found here:

Related Question