[7.260] Astaro and vpn imcompatibility [NOTABUG]

William Warren over 17 years ago

taking this down..sorry for the tensions and issues.

Parents

0 Cath over 17 years ago

Which VPN client? SSL, PPTP, L2TP?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to Cath

taking this down..sorry for the tensions and issues.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to tom_01

taking this down..sorry for the tensions and issues.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to William Warren

It's confirmed here. installing the latest 2.70 beta xp ipsec client is unable to do any kind of work via vpn behind astaro. The connection is able to be established but she can't access her files, e-mail, servers...anything.

this is a bug...this being marked not a bug is baffling.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to tom_01

taking this down..sorry for the tensions and issues.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to William Warren

taking this down..sorry for the tensions and issues.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to William Warren

taking this down..sorry for the tensions and issues.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 crashtestdummy over 17 years ago in reply to William Warren

William,

Jus to be clear, I'm assuming that you're uing L2TP/IPSec from your windows machine, through an Astaro, to some other endpoint. Astaro is not the L2TP server that you are connecting to. That was implied, but never fully stated.

Also, you mentioned that this same problem existed in 7.201, so this doesn't really belong in this forum, and insisting this should be tagged as a 7.300 bug doesn't make much sense.

Even calling this a bug is pretty hard to do, since the essential part of what you are trying to do works fine. I have customers who do the same as you are describing. For them it works fine. This means that there must be something else involved that make Astaro's behavior different from ipcop. For example, Is there high packet latency on the isp? Is Nat Traversal enabled on the L2TP server? Does ipcop have an IPSec passthru option enabled?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 William Warren over 17 years ago in reply to crashtestdummy

taking this down..sorry for the tensions and issues.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Cath over 17 years ago in reply to William Warren

Hi William,

Looking through this thread there seems to be only one NAT masq specified. Does your L2TP vpn use the same network pool as your internal network as assigned by DHCP or is it using the default L2TP VPN pool network?

If using L2TP Vpn pool network you will need a second NAT Masq for the VPN network to the external interface in order to pass traffic to the external world.

Also if you are using this ASG box as your non-default gateway for your internal PCs try setting a SNAT rule such as:
Source: L2TP network
Destination: Internal(network)
Service: Any
Change Source: Internal(address)

This will effectively masq the L2TP pool as the ASG address for return traffic.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 ReD-MaN over 17 years ago in reply to Cath

William,

I am using IPSEC and L2TP through my ASG beta no problem.

I use the Cisco IPSEC client with zero problems, and the Windows L2TP no problem.

Off topic, can I ask why you are always pushing that ipcop crap on here so much? For the free OSS firewalls there are much better than ipcrap.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 gkemter over 17 years ago in reply to ReD-MaN

William,
Off topic, can I ask why you are always pushing that ipcop crap on here so much? For the free OSS firewalls there are much better than ipcrap.

ymmd and ++
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 gkemter over 17 years ago in reply to ReD-MaN

William,
Off topic, can I ask why you are always pushing that ipcop crap on here so much? For the free OSS firewalls there are much better than ipcrap.

ymmd and ++
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 ReD-MaN over 17 years ago in reply to gkemter

Hey William, hope you didn't take it down because of me? I meant to put a smiley on. [:)]

Sorry if it was because of me.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel