Ubuntu Strongswan xl2tpd L"TP

ほとんど以下のページの参照。「どてやの戯れ言」

$ sudo apt-get install ppp strongswan xl2tpd

/etc/ipsec.conf

config setup 

conn L2TP-PSK-noNAT
     forceencaps=yes
     authby=secret
     auto=add
     keyingtries=3
     ike=aes-sha1-modp2048
     esp=aes-sha1-modp2048
     rekey=no
     ikelifetime=8h
     keylife=1h
     keyexchange=ikev1
     type=transport
     left=192.168.0.251        #サーバー自身のIPアドレス
     leftprotoport=17/1701
     right=%any
     rightprotoport=17/%any
     dpddelay=40
     dpdtimeout=130
     dpdaction=clear
     conn L2TP-PSK-NAT
     rightsubnet=0.0.0.0/0
      also=L2TP-PSK-noNAT

/etc/ipsec.secrets

192.168.0.251 : PSK "123456789"  #←　123456789 は独自のパスワード

/etc/strongswan.conf　　#特に書き換えなかった。

charon {
        load_modular = yes
        plugins {
                include strongswan.d/charon/*.conf
        }
}
include strongswan.d/*.conf

 /etc/sysctl.conf

net.ipv4.ip_forward=1
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.eth0.send_redirects = 0
net.ipv4.conf.lo.send_redirects = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.eth0.accept_redirects = 0
net.ipv4.conf.lo.accept_redirects = 0

/etc/xl2tpd/xl2tpd.conf    

必要な部分だけコメントアウトを解除、書き換え

[global]
    access control = no
    auth file = /etc/ppp/chap-secrets
    debug avp = yes
    debug network = yes
    debug packet = yes
    debug state = yes
    debug tunnel = yes    #うまくつながったら no に

[lns default]
ip range = 192.168.0.61-192.168.0.70
local ip = 192.168.0.251
length bit = yes
refuse chap = yes
require authentication = yes
name = zedan-l2tp       #覚えておく
pppoptfile = /etc/ppp/l2tpd-options

/etc/ppp/l2tpd-options

name zedan-l2tp　　#さっきの名前

refuse-pap

refuse-chap
refuse-mschap
require-mschap-v2
ms-dns 192.168.0.2
proxyarp
nodefaultroute
lock
nobsdcomp
mtu 1280
mru 1280

/etc/ppp/chap-secrets

ユーザー登録

username * password *

再起動で有効化

サーバーがNATの内側にいる場合

Windows7
\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PolicyAgent
ここに　DWORD値 で
AssumeUDPEncapsulationContextOnSendRule
値は2 を作成