This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec Connection with Win2003-Server

Hi,

I try to establish an IPSec connection between Astaro V5.208 and a Win2003 SP1 Server.

Any time I try to establish the connection I get the following eventlog error message:
IKE-Sicherheitszuordnung konnte nicht ausgehandelt werden.
Modus:
Datenschutzmodus (Schnellmodus)

Filter:
Quell-IP-Adresse xxx.xxx.xxx.xxx
Quell-IP-Adressmaske 255.255.255.0
Ziel-IP-Adresse yyy.yyy.yyy.yyy
Ziel-IP-Adressmaske 255.255.255.255
Protokoll 0
Quellport 0
Zielport 0
Lokale IKE-Adresse xxx.xxx.xxx.xxx
Peer-IKE-Adresse zzz.zzz.zzz.zzz
IKE-Quellport 500
IKE-Zielport 500
Private Peeradresse

Peeridentität:
Kennung des vorinstallierten Schlüssels.
Peer-IP-Adresse: zzz.zzz.zzz.zzz

Fehlerpunkt:
Benutzer

Fehlerursache:

Zusätzlicher Status:
Als drittes verarbeitete Nutzlast (ID)
Antwort. Wartezeit 1
0x0 0x0

and only one quickmode SA is visible. (Mainmode seems fine).
Astaro reports a tunnel after trying to ping the external Astaro IP or a client in the subnet behind it, but the ping times out.

I followed the instructions in http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/ipsectunnelmodevpn.mspx

Someone got an idea where I went wrong or how to avoid the error under Win2003?

THX,
ggriese

This thread was automatically locked due to age.