Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 3346 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Packet being dropped by Site to Site VPN

ptriller
I have a problem with my Astaro and i am really stuck.

I am trying to connecct a IPSec VPN with an external site, but my problem is earlier.

When I look at the network log I see the following entry in it:
4:59:00  Default DROP  UDP 
ee.ee.ee.ee  :  500
→ 
vv.vv.vv.vv  :  500


ee.ee.ee.ee=IP of external  Interface of my Astaro firewall
vv.vv.vv.vv=IP of the VPN endpoint I try to connect



No the really confusing thing is I added all kinds of rules to the packet filtering and it still gets dropped:
even when I add this rule as Rule Nr 1:
Source: any,Service:any, Interface:all, Dest vv.vv.vv.vv -> accept. 

and the packet still gets dropped.

The confusing thing is when I send a packet from our intranet through the firewall to vv.vv.vv.vv then the rule matches and the packet gets through.


Does anyone have any idea what went wrong here ?


Thanks in advance


Peter


This thread was automatically locked due to age.
  • 0
    Peter, are you trying to establish a VPN between the Astaro and another device?

    Or, are you trying to VPN from behind the Astaro to another VPN server?  If the latter, then all you need is a packet filter rule using the IPsec services group: 'Internal (Network) -> IPsec -> Any : Allow'.

    Cheers - Bob