L2TP/IPsec посредством Openswan

Checking if IPsec got installed and started correctly:

Version check and ipsec on-path                           [OK]
Openswan U2.6.49.1/K(no kernel code presently loaded)
See `ipsec --copyright' for copyright information.
Checking for IPsec support in kernel                      [FAILED]

 The ipsec service should be started before running 'ipsec verify'

Hardware random device check                              [N/A]
Checking rp_filter                                        [ENABLED]
 /proc/sys/net/ipv4/conf/all/rp_filter                    [ENABLED]
Checking that pluto is running                            [FAILED]
Checking NAT and MASQUERADEing                            [TEST INCOMPLETE]
Checking 'ip' command                                     [OK]
Checking 'iptables' command                               [OK]

ipsec verify: encountered errors

/etc/ipsec.conf
config setup
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12 [b]- Честно говоря не совсем понимаю как правильно заполнить эту строку, но нужно чтоб машина получала адресацию от VPN сервера[/b]
    nat_traversal=yes
    protostack=netkey
    oe=no
# Replace eth0 with your network interface
    plutoopts=enps0 [b]- Так светится мой сетевой интерфейс командой ip addr[/b]
conn L2TP-PSK
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    dpddelay=30
    dpdtimeout=120
    dpdaction=clear
    rekey=yes
    ikelifetime=8h
    keylife=1h
    type=transport
# Replace %any below with your local IP address (private, behind NAT IP is okay as well)
    left=10.47.1.1 [b]- Локальный IP моей машины[/b]
    leftprotoport=17/1701
# Replace IP address with your VPN server's IP
    right=1.1.1.1 [b]- ip vpn сервера, моего микротика[/b]
    rightprotoport=17/1701

[[email protected] etc]# ipsec auto --add L2TP-PSK
/usr/lib/openswan/auto: строка 155: 12308 Ошибка сегментирования                   (стек памяти сброшен на диск) ipsec addconn $config $options $names

[lac vpn-connection]
lns = 1.1.1.1
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd.client
length bit = yes

/etc/ppp/options.l2tpd.client
pcp-accept-local
ipcp-accept-remote
refuse-eap
require-mschap-v2
noccp
noauth
idle 1800
mtu 1410
mru 1410
defaultroute
usepeerdns
debug
connect-delay 5000
name мой_логин
password мой_пароль

Create the control file for xl2tpd:
$ mkdir -p /var/run/xl2tpd
$ touch /var/run/xl2tpd/l2tp-control

[[email protected] xl2tpd]# systemctl start openswan
Job for openswan.service failed because the control process exited with error code.
See "systemctl status openswan.service" and "journalctl -xe" for details

[[email protected] ~]# systemctl status openswan.service
? openswan.service - Openswan daemon
   Loaded: loaded (/usr/lib/systemd/system/openswan.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Mon 2018-01-08 11:14:04 +11; 1min 1s ago
  Process: 10371 ExecStop=/usr/lib/systemd/scripts/ipsec --stop (code=exited, status=0/SUCCESS)
  Process: 13673 ExecStart=/usr/lib/systemd/scripts/ipsec --start (code=exited, status=139)

янв 08 11:14:04 MyArch systemd[1]: openswan.service: Service hold-off time over, scheduling restart.
янв 08 11:14:04 MyArch systemd[1]: openswan.service: Scheduled restart job, restart counter is at 5.
янв 08 11:14:04 MyArch systemd[1]: Stopped Openswan daemon.
янв 08 11:14:04 MyArch systemd[1]: openswan.service: Start request repeated too quickly.
янв 08 11:14:04 MyArch systemd[1]: openswan.service: Failed with result 'exit-code'.
янв 08 11:14:04 MyArch systemd[1]: Failed to start Openswan daemon.

Indy
Насколько я понимаю - у ядра не включена поддержка IPSec. Как ее включить (и надо ли?) - не нашел.

vasek
Поддержка по дефолту включена.

 опции send_redirects, accept_redirects равны 1, нужно установить их значение равным 0

Indy
Checking for IPsec support in kernel [FAILED]