VPN not working ...

Hello,

I'm trying to setup my VPN for many days and it is still not working.

I want to have my Windows XP Pro SP1 Client connect to another network, where a Suse Linux 9.1 Pro with FreeSwan 2.04 (x509 patch included) should do the job. But it does not. I want to connect via L2TP (using L2TPD 0.6.9) but the only response of my Windows Client is "Error 791".

I have generated certificates for Root, Gateway and the user. All certificates are signed by the root.

I will give you my certain configuration files and I hope anybody could help me with these issues. 

1. Output of ipsec auto --status

000 interface lo/lo ::1
000 interface lo/lo 127.0.0.1
000 interface eth0/eth0 192.6.2.12
000 interface ppp0/ppp0 80.130.189.224
000 %myid = (none)
000 debug none
000  
000 "L2TP-CERT": 80.130.189.224[C=DE, O=Test GmbH, CN=Test CA]:17/1701---217.5.98.30...%any:17/1701; unrouted; eroute owner: #0
000 "L2TP-CERT":   CAs: 'C=DE, O=Test GmbH, CN=Test CA'...'%any'
000 "L2TP-CERT":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
000 "L2TP-CERT":   policy: RSASIG+ENCRYPT+TUNNEL+DONTREKEY; prio: 32,32; interface: ppp0; 
000 "L2TP-CERT":   newest ISAKMP SA: #0; newest IPsec SA: #0; 
000  
000  

2. Output of pluto messages when trying to establish a connection

Aug  7 19:37:12 mngateway ipsec__plutorun: Starting Pluto subsystem...
Aug  7 19:37:12 mngateway pluto[9945]: Starting Pluto (FreeS/WAN Version 2.04 X.509-1.5.3 LIBCURL PLUTO_USES_KEYRR)
Aug  7 19:37:12 mngateway pluto[9945]:   including NAT-Traversal patch (Version 0.6) [disabled]
Aug  7 19:37:12 mngateway pluto[9945]: Using Linux 2.6 IPsec interface code
Aug  7 19:37:12 mngateway pluto[9945]: Changing to directory '/etc/ipsec.d/cacerts'
Aug  7 19:37:12 mngateway pluto[9945]:   loaded CA cert file 'TestCA-cert.pem' (1294 bytes)
Aug  7 19:37:12 mngateway pluto[9945]: Changing to directory '/etc/ipsec.d/aacerts'
Aug  7 19:37:12 mngateway pluto[9945]: Changing to directory '/etc/ipsec.d/ocspcerts'
Aug  7 19:37:12 mngateway pluto[9945]: Changing to directory '/etc/ipsec.d/crls'
Aug  7 19:37:13 mngateway pluto[9945]:   loaded host cert file '/etc/ipsec.d/certs/mnvpngw-cert.pem' (4507 bytes)
Aug  7 19:37:13 mngateway pluto[9945]: added connection description "L2TP-CERT"
Aug  7 19:37:13 mngateway pluto[9945]: listening for IKE messages
Aug  7 19:37:13 mngateway pluto[9945]: adding interface ppp0/ppp0 80.130.189.224
Aug  7 19:37:13 mngateway pluto[9945]: adding interface eth0/eth0 192.6.2.12
Aug  7 19:37:13 mngateway pluto[9945]: adding interface lo/lo 127.0.0.1
Aug  7 19:37:13 mngateway pluto[9945]: adding interface lo/lo ::1
Aug  7 19:37:13 mngateway pluto[9945]: loading secrets from "/etc/ipsec.secrets"
Aug  7 19:37:26 mngateway pluto[9945]: packet from 192.6.2.11:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000003]
Aug  7 19:37:26 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: responding to Main Mode from unknown peer 192.6.2.11
Aug  7 19:37:26 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: Peer ID is ID_DER_ASN1_DN: 'C=DE, O=Test GmbH, OU=VPN, CN=VPNCA'
Aug  7 19:37:26 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: issuer crl not found
Aug  7 19:37:26 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: no suitable connection for peer 'C=DE, O=Test GmbH, OU=VPN, CN=VPNCA'
Aug  7 19:37:26 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: sending encrypted notification INVALID_ID_INFORMATION to 192.6.2.11:500
Aug  7 19:37:27 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: next payload type of ISAKMP Hash Payload has an unknown value: 174
Aug  7 19:37:27 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: malformed payload in packet
Aug  7 19:37:27 mngateway pluto[9945]: "L2TP-CERT"[1] 192.6.2.11 #1: sending encrypted notification PAYLOAD_MALFORMED to 192.6.2.11:500

3. ipsec.conf file on linux gateway

# /etc/ipsec.conf - FreeS/WAN IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.11 2003/06/13 23:28:41 sam Exp $

# This file:  /usr/share/doc/packages/freeswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5
#
# Help:
# http://www.strongsec.com/freeswan/install.htm

version	2.0	# conforms to second version of ipsec.conf specification


config setup
	interfaces="%defaultroute"
	uniqueids=no

conn %default
	left=%defaultroute
	leftcert=mnvpngw-cert.pem
	auto=add
	authby=rsasig
	rekey=no
	keyingtries=5
	rightrsasigkey=%cert


conn L2TP-CERT
	authby=rsasig
	pfs=no
	leftrsasigkey=%cert
	leftprotoport=17/1701
	right=%any
	rightprotoport=17/1701
	auto=add
	keyingtries=3	
	
		
conn block
	auto=ignore

conn clear
	auto=ignore

conn private
	auto=ignore

conn private-or-clear
	auto=ignore

conn clear-or-private
	auto=ignore

conn packetdefault
	auto=ignore


As you can see, there are some error messages in the pluto output I can't understand and I am not able to get rid of them.


Thanks for your help in advance.

Greetings,
  Kai