require-mschap-v2
ms-dns 8.8.8.8
ms-dns 8.8.4.4
asyncmap 0
auth
crtscts
idle 1800
mru 1200
mtu 1200
lock
hide-password
modem
debug
name l2tpd
proxyarp
lcp-echo-interval 30
lcp-echo-failure 4
nodefaultroute
connect-delay 5000
logfile /var/log/l2tpd.log
[global]
auth file = /etc/ppp/chap-secrets
ipsec saref = yes
debug network = yes
debug tunnel = yes
listen-addr = 0.0.0.0
force userspace = no
[lns default] ; Our fallthrough LNS definition
ip range = 10.2.0.2-10.2.0.2 ; * Allocate from this IP range
local ip = 10.1.0.1 ; * Our local IP to use
length bit = yes ; * Use length bit in payload?
refuse pap = yes ; * Refuse PAP authentication
refuse chap = yes ; * Refuse CHAP authentication
require authentication = yes ; * Require peer to authenticate
ppp debug = yes ; * Turn on PPP debugging
pppoptfile = /etc/ppp/options.xl2tpd ; * ppp options file
-A INPUT -p tcp --dport 1701 -j ACCEPT
-A INPUT -p tcp --dport 1723 -j ACCEPT
-A INPUT -p udp --dport 1701 -j ACCEPT
-A INPUT -p udp --dport 1723 -j ACCEPT
-A INPUT -p esp -j ACCEPT
-A INPUT -p ah -j ACCEPT
-A INPUT -p gre -j ACCEPT
pptpd отлично соединяется, а l2tp выдает 691..
чего может не хватать?