I am a home user who have just installed ASG V8. I have some expreience with network configurations, but since I'm more of a developer than a networker, please bear with me if I've misunderstood something or ask really stupid questions.
The story: (skip this if you're not interested in why I've ended up where I'm at)
I used to have av VPN server set up on my Vista desktop computer, but since this required the computer to be turned on all the time, I wanted a more dedicated VPN solution. I bought a TP-link router, DD-WRT'ed it and tried setting up VPN on this. This worked from my computer, but I could not get my android, ipad and iphone to connect.
I talked to my sysadmin at work who told me that we use ASG 220 at work, and that he was so pleased with this that he had set up ASG using a computer with 2 NICs at home. He suggested that I should give it a try as the setup was easy, and it worked as an VPN-server.
So i did...the set up went almost without any problems, until I came to the VPN-part. The set-up of the VPN was easy, the connecting was worse.
The problem:
My setup is like this:
Work(X.X.X.14)Internet(X.X.X.165)Router(Y.Y.Y.1)(Y.Y.Y.100)ASG(Z.Z.Z.100)
cannot respond to IPsec SA request because no connection is known for X.X.X.165/32===Y.Y.Y.100:4500[Y.Y.Y.100]:17/1701...X.X.X.14:4500[COMPUTER.WORK.local]:17/%any
I guess this is because of my ISP router? The ASG gets packages intended for X.X.X.165 delivered to Y.Y.Y.100 and won't accept them.
I spent yesterday reading forum posts searching for people having the same problem, I fonud some having similar problems, but the suggested solution was alway bridging the router or moving the ASG closest to the internet.
Is there any set-up that will solve my problem?
It kind of seems strange to me that the VPN server requires to have the internet-IP on it's NIC (my Vista computer didn't have this).
All suggestions and comments are appreciated.
EDIT: I must add that the Vista was running PPTP-VPN, while I've been trying to get L2TP over IPSec to work on the Astaro. Something's telling me that the IPSec part would be more picky regarding the IPs.
This thread was automatically locked due to age.