[7.900][QUESTION][ANSWERED] S2S-VPN Nothing going trough?

I have imported my config from 7.504, I have a S2S IPSec VPN configured.

I am now running 7.900, the vpn is configured and is running, but only keep alive seem to go trough. No external traffic. (i.e pings rdp) all fail. When I go and look at the routing table there is an entry for my vpn which seem right...

Anyone have an idea why no traffic goes trough?

0 Astaro Beta Bot over 15 years ago

Astaro Beta Report

--------------------------------

Version: 7.900

Type: QUESTION

State: ANSWERED

Reporter: x-cimo+

Contributor: darrenl++, bkortleven

MantisID: 

Target version: 

Fixed in version: 

--------------------------------

0 kbr over 15 years ago

Can you please retry it with 7.901? There have been a few subtle changes in this update.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 x-cimo over 15 years ago in reply to kbr

I was hoping 7.901 would fix it, no luck [:(]

Still no traffic going trough... The Site2Site VPN Tunnel is established.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 darrenl over 15 years ago

Not sure if this will help:
I had the same issue when running a site to site from 7.504 to 7.900 - apparently I found a bug in 7.504. [:)] I was advised to change to SHA1 (vs. 256 or greater) and the link will allow traffic to be passed.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 x-cimo over 15 years ago in reply to darrenl

Thanks a lot! Changing IPSec authentication algorithm from SHA 256 to SHA1 fixed the problem... hopefully they will fix this [:)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BramKortleven over 15 years ago in reply to x-cimo

Same issue here.
I tried RSA and PSK keys, changing the TripleDES PFS Comp (which we always use) to use SHA1 instead of MD5, but nothing going through the tunnel...
When using the predefined AES256 policy, it seems to work for Firewall to Firewall pings through Support - Tools...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel