>From the logs, it definitely isn't using IPsec XAuth.

The "NO_PROPOSAL_CHOSEN error" means your VPN server is using a legacy
encryption algorithm that strongswan considers broken as it is old and
weak, it is most likely 3DES :

https://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites

It would be best if the VPN server can be updated to use stronger cipher
suites, but if you can't, in the README.md file, see the "User specified
IPsec IKEv1 cipher suites" section :

https://github.com/nm-l2tp/network-manager-l2tp#user-specified-ipsec-
ikev1-cipher-suites

Extract :
If you are using strongSwan with this VPN plugin and you need to use the same 
ciphers that older versions of strongSwan and this VPN plugin used, enter the 
following in the corresponding IPsec configuration dialog text boxes:

Phase1 Algorithms : aes128-sha1-modp2048,3des-sha1-modp1536,3des-sha1-modp1024
Phase2 Algorithms : aes128-sha1,3des-sha1


If you then get a xl2tpd failure, you might also need to stop the system xl2tpd 
service, see "Issue with not stopping system xl2tpd service" section in the 
README.md file :

https://github.com/nm-l2tp/network-manager-l2tp#issue-with-not-stopping-
system-xl2tpd-service

I think OpenSUSE doesn't start the system xl2tpd service by default, but
Ubuntu does.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1726135

Title:
  need to use group name

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-l2tp/+bug/1726135/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to