Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSec with MacOS X L2TP client?

    Scheduled Pinned Locked Moved IPsec
    4 Posts 3 Posters 3.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eweri
      last edited by

      Hello!

      I just wonder if someone here managed to get a mobile client running MacOS X connect to pfsense via IPSec?

      This is all i can find in the ppp.log (MacOS X):
      …
      Thu Dec  6 21:14:24 2007 : L2TP connecting to server '192.168.51.84' (192.168.51.84)...
      Thu Dec  6 21:14:27 2007 : L2TP sent SCCRQ
      Thu Dec  6 21:14:27 2007 : IPSec connection started
      Thu Dec  6 21:14:27 2007 : IPSec phase 1 client started
      Thu Dec  6 21:14:37 2007 : IPSec connection failed
      ...
      (The IP-address is the WAN-Interface of the pfsense connected to my LAN)

      And this is what I find at pfsense in /var/log/ipsec.log:
      ...
      racoon: ERROR: not acceptable Identity Protection mode

      There is also a strange thing, the L2TP-client in MacOS X wants a user, a password and psk to function properly, but if I understand it right pfsense just needs an identifier (equals user?) and the psk (same in MacOS X), right?

      Every hint is welcome, bye
      eweri

      1 Reply Last reply Reply Quote 0
      • T
        tacfit
        last edited by

        L2TP and IPSec are not the same, so I don't think it should work. I've tried similar with the Windows L2TP client and it wouldn't work.

        1 Reply Last reply Reply Quote 0
        • S
          sullrich
          last edited by

          L2TP is not supported at this time.

          1 Reply Last reply Reply Quote 0
          • E
            eweri
            last edited by

            @tacfit:

            L2TP and IPSec are not the same, so I don't think it should work. I've tried similar with the Windows L2TP client and it wouldn't work.

            Thanks - that was not present that I can have IPsec without L2TP - I thought if you have IPsec you always have L2TP.

            Bye,
            eweri

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.