How to configure L2TP / IPSec?

I’m a bit stuck in configuring L2TP over IPSec with tumbleweed with the network manager in kde.
First I had the error “The VPN service ‘org.freedesktop.NetworkManager.l2tp’ was not installed.”. I needed to install the dependency “Networkmanager-l2tp”. But this dependency was not part of the official opensuse repository. I did a search for packages and installed it from this repository: https://build.opensuse.org/package/show/GNOME%3AFactory/NetworkManager-l2tp .

Now I’m able to configure L2TP with gateway, username, password with extra IPsec settings for gateway id and preshared key.

The errors I get when connecting:
/usr/sbin/ipsec: line 25: uname: command not found
**/usr/sbin/ipsec: unknown IPsec command `whack’

**Why is Networkmanager-l2tp not stable after 2/3 years (found some old post dating from 2014/2015 with similar problems). Anything I’m doing wrong?

Hi!

I have the same situation (tumbleweed, KDE Plasma5, installed Networkmanager-l2tp from GNOME factory repository, PSK) and the same errors.

Here is my log:

sudo journalctl -u NetworkManager -f

Jul 20 22:49:15 NetworkManager[1151]: <info> [1500583755.7466] audit: op=“connection-activate” uuid=“86c8b721-f00f-40e3-9110-6078
4cd7dc19” name=“vpn” pid=2267 uid=1000 result=“success”
Jul 20 22:49:15 hostname NetworkManager[1151]: <info> [1500583755.7487] vpn-connection[0x55e3d46364d0,86c8b721-f00f-40e3-9110-60784cd7dc19
,“vpn”,0]: Saw the service appear; activating connection
Jul 20 22:49:19 hostname nm-l2tp-service[22699]: Use ‘xxx.xxx.xxx.xxx’ as a gateway
Jul 20 22:49:19 hostname nm-l2tp-service[22699]: Check port 1701
Jul 20 22:49:19 hostname nm-l2tp-service[22699]: ipsec enable flag: yes
Jul 20 22:49:19 hostname nm-l2tp-service[22699]: starting ipsec
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 25: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 27: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: unknown IPsec command setup' (ipsec --help’ for list)
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 25: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 27: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: unknown IPsec command whack' (ipsec --help’ for list)
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 25: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 27: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: unknown IPsec command auto' (ipsec --help’ for list)
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 25: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 27: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: unknown IPsec command addconn' (ipsec --help’ for list)
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 25: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: line 27: uname: command not found
Jul 20 22:49:19 hostname NetworkManager[1151]: /usr/sbin/ipsec: unknown IPsec command auto' (ipsec --help’ for list)
Jul 20 22:49:19 hostname NetworkManager[1151]: **<warn> [1500583759.9028] vpn-connection[0x55e3d46364d0,86c8b721-f00f-40e3-9110-60784cd7dc19[/b]
,“vpn”,0]: VPN connection: failed to connect: ‘Possible error in IPSec setup.’

It would be really great if someone could help.

Cheers
Thomas

**

This bug report is probably relevant here. In particular read the comments from the maintainer (Douglas Kosovic), post 14 onwards.

Thanks, almost there, I replaced the package with this repository : http://download.opensuse.org/repositories/home:/kill_it/openSUSE_Factory/ . Which seems to provide version 1.2.8 at the moment.

This time, I get a lot of logs in the journal. But he seems not to be able to connect to the gateway (timeout on port 1701).

I checked with ‘ps afx’ and it seems no xl2tpd service is running or occupying port 1701 on my client laptop.