strongswan_configs

cat ipsec.conf
====================================================
config setup

conn %default
        ikelifetime=1440m
        keylife=60m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev2
        rekey=no

conn rw_win7
        ike=aes256-sha1-modp1024!
        esp=aes256-sha1!
        dpdaction=clear
        dpddelay=300s
        left=134.202.84.62
        leftsubnet=172.16.1.0/24
        leftprotoport=17/1701
        leftauth=psk
        right=%any
        rightprotoport=17/%any
        rightauth=eap-mschapv2
        rightsourceip=172.16.1.11
        eap_identity=%any
        auto=add
=======================================================================
cat strongswan.conf
=======================================================================
charon {
        load = curl test-vectors aes des sha1 sha2 md4 md5 pem pkcs1 pkcs8 gmp random nonce x509 revocation hmac xcbc ctr ccm gcm stroke kernel-netlink socket-default attr unity xauth-generic eap-identity eap-mschapv2 ha
        cisco_unity = yes
        i_dont_care_about_security_and_use_aggressive_mode_psk = yes
        dh_exponent_ansi_x9_42 = no
        plugins {
                attr {
                        #split-exclude = 192.168.0.0/24
                }
        }
        filelog {
                /var/log/charon.log {
                time_format = %b %e %T
                ike_name = yes
                append = no
                default = 2
                flush_line = yes
                }
        }
}
=========================================================================
cat /etc/xl2tpd/xl2tpd.conf
=========================================================================
[global]                                ; Global parameters:
port = 1701                             ; * Bind to port 1701
auth file = /etc/xl2tpd/l2tp-secrets    ; * Where our challenge secrets are
access control = no                     ; * Refuse connections without IP match
rand source = dev                       ; Source for entropy for random

[lns default]                           ; Our fallthrough LNS definition
exclusive = no                          ; * Only permit one tunnel per host
ip range = 172.16.1.11-172.16.1.20      ; IP range to give to clients here
local ip = 172.16.1.10                  ; L2TP end of the tunnel-this_machine
refuse pap = yes                        ; * Refuse PAP authentication
refuse chap = yes
require authentication = yes            ; Require authentication
name = win7
ppp debug = yes                         ; * Turn on PPP debugging
pppoptfile = /etc/ppp/options.xl2tpd    ; * ppp options file

==========================================================================
cat /etc/ppp/options.xl2tpd
==========================================================================
require-mschap-v2
ms-dns 8.8.8.8
proxyarp
asyncmap 0
auth
crtscts
lock
hide-password
modem
debug