Hallo Forum,
wir haben 2 DSL Anschluesse. Einen neuen UnityMediaAnschluss mit 100MBit.
Diesen würde ich gerne als Gateway für unsere VPN IPSEC Tunnel benutzen.
UnityMedia liefert eine FritzBox mit. Zwangsweise, da diese den KoaxAnschluss hat.
Auf der Fritzbox habe ich die Funktion "Exposed Host" aktiviert. Die Box haängt bei uns am etc4. Damit sollte ja alles auf die Astaro laufen.
Stelle ich jetzt aber das IPSEC Site2Site auf diese Schnittstelle um, bekommt die gegenstelle keine Info. Als würden die Anfragen nicht in der UTM ankommen.
benötige ich da eine spezielle NAT regel?
Hier das log der Gegenstelle:
2013:01:04-12:10:34 mail pluto[5456]: packet from PublicIP:500: initial Main Mode message received on IPGegenstelle:500 but no connection has been authorized with policy=PUBKEY
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #47: max number of retransmissions (2) reached STATE_MAIN_I3. Possible authentication failure: no acceptable response to our first encrypted message
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #47: starting keying attempt 13 of an unlimited number
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: initiating Main Mode to replace #47
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: received Vendor ID payload [strongSwan]
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: ignoring Vendor ID payload [Cisco-Unity]
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: received Vendor ID payload [XAUTH]
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: received Vendor ID payload [Dead Peer Detection]
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: received Vendor ID payload [RFC 3947]
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: enabling possible NAT-traversal with method 3
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: NAT-Traversal: Result using RFC 3947: no NAT detected
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: we don't have a cert
2013:01:04-12:10:59 mail pluto[5456]: "NamederVerbindung" #48: ignoring informational payload, type INVALID_ID_INFORMATION
2013:01:04-12:11:09 mail pluto[5456]: "NamederVerbindung" #48: discarding duplicate packet; already STATE_MAIN_I3
2013:01:04-12:11:09 mail pluto[5456]: "NamederVerbindung" #48: next payload type of ISAKMP Hash Payload has an unknown value: 111
2013:01:04-12:11:09 mail pluto[5456]: "NamederVerbindung" #48: malformed payload in packet
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: received Vendor ID payload [strongSwan]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: ignoring Vendor ID payload [Cisco-Unity]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: received Vendor ID payload [XAUTH]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: received Vendor ID payload [Dead Peer Detection]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: received Vendor ID payload [RFC 3947]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2013:01:04-12:11:14 mail pluto[5456]: packet from PublicIP:500: initial Main Mode message received on IPGegenstelle:500 but no connection has been authorized with policy=PUBKEY
2013:01:04-12:11:29 mail pluto[5456]: "NamederVerbindung" #48: next payload type of ISAKMP Hash Payload has an unknown value: 83
2013:01:04-12:11:29 mail pluto[5456]: "NamederVerbindung" #48: malformed payload in packet
2013:01:04-12:11:29 mail pluto[5456]: "NamederVerbindung" #48: discarding duplicate packet; already STATE_MAIN_I3
This thread was automatically locked due to age.
