This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Success with IPsec

I'm trying to get an IPsec connection to work between Windows 2000 and Astaro 1.811 with no lock what so ever.

I've tried PGP Net 7.0.3, SSH Sentinel, and the builtin IPsec features of W2k.

It appears that the Astaro box "isn't listening" for IPsec.

I've specified filters allowing "anyone" to connect to "anything" on the public network, but still no luck.

Oddly it appears that any filters I add don't show up in the packet filter list.

Any tips?

This thread was automatically locked due to age.

Parents

0 Gert Hansen over 23 years ago

Hi WareNet,

did you use the VPN Howto at http://docs.astaro.org ?

VPN HowTo

kind regards
gert
Cancel
Vote Up 0 Vote Down

Cancel
0 WareNet over 23 years ago in reply to Gert Hansen

Yes, I've tried the docs.

I really need to get a virtual IP from the LAN side of the firewall.
Cancel
Vote Up 0 Vote Down

Cancel
0 Gert Hansen over 23 years ago in reply to WareNet

Hi WareNet,

we use FreeSWAN as our IPSEC Stack and they doen't support Virtual IP.

If you need that, give PPTP a try.
You can try it using our latest beta version available.

greetings

gert
Cancel
Vote Up 0 Vote Down

Cancel
0 Niall Murphy over 23 years ago in reply to Gert Hansen

There are a few funnies with IPSEC in 1.8:

a) _updown script references ipfwadm or ipchains which doesn't exist in 1.8 (it's iptables)
b) iptables isn't in the /var/chroot-ipsec space
c) changing firewall rules makes IPSEC reload VPN configuration
d) no way to prevent manual config being overwritten by web interface (would be nice if there were)
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Niall Murphy over 23 years ago in reply to Gert Hansen

There are a few funnies with IPSEC in 1.8:

a) _updown script references ipfwadm or ipchains which doesn't exist in 1.8 (it's iptables)
b) iptables isn't in the /var/chroot-ipsec space
c) changing firewall rules makes IPSEC reload VPN configuration
d) no way to prevent manual config being overwritten by web interface (would be nice if there were)
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data