Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 1134 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NET TO NET- ASL TO VPN CONCENTRATOR

JeffS
I am trying to connect a vpn concentrator to my asl. Trying for a net to net connection.
Did not see any info in the vpn how-to docs on this.
Any help and fast would be very appreciated!!!


This thread was automatically locked due to age.
Parents
  • 0
    Hi JeffS, 

    can you describe you setup a little bit more detailed. What kind of VPN Concentrator are you using.

    kind regards

    gert
  • 0 in reply to Gert Hansen
    ITS A CISCO VPN CONCENTRATOR. THEY SAY ITS SUPPORTS THE FOLLOWING:
    * IKE parameters:
    * MD5/HMAC authentication
    * DES-56 encryption
    * Diffie-Hellman Group 1,2  key generation
    * IPSec Parameters:
    * ESP protocol using MD5/HMAC authentication
    * DES-56 encryption
    there public ip is 12.x.x.x and there internal network is 10.x.x.x

    my public ip is 206.x.x.x
    my internal ip is 192.x.x.x

    I Have tried to connect and I get a 'could not orient  connection' in my livelog.

    currently they have changed it to : 
    IKE:
    Triple DES
    MD5
    DH2

    IPSec:
    ESP with MD5
    Triple DES

    I still cannot ping the connection.
    I have defined the networks to the best of my ability in asl.

    I'm running asl version 1.8.11
  • 0 in reply to JeffS
    As seen in the manual we only support the following protocols

    - 3DES
    - Diffie-Hellman Group 2,5
    - MD5
    - ESP with MD5/HMAC

    please upgrade to the latest ASL version using Up2Date.

    How does your VPN Configuration look like, local ips, remote ips, local and remote networks.

    Did you try to turn 'Perfect forwarding secrecy (PFS)' off.
    Often they are not compatile.

    kind regards 
    gert
  • 0 in reply to Gert Hansen
    network definitions:
    external 206.x.x.x 255.x.x.x

    field_centrix 192.x.x.x 255.x.x.255
      
    field_centrix_internal 10.x.x.x 255.128.x.x

    internal 192.x.x.x 255.255.255.0 

    Wireless Matrix 12.x.x.x 255.x.x.255  

    Any 0.0.0.0 0.0.0.0

    vpn connection:
    field_centrix external  Wireless Matrix field_centrix_internal 

    pfs=no
    secure assoc=ike
    auth method=secret
    secret=**********
    local interface=external
    local subnet=field_centrix
    remote ip=wireless matrix
    remote subnet=field_centrix_internal

    ike debugging=on
    vpn=on
Reply
  • 0 in reply to Gert Hansen
    network definitions:
    external 206.x.x.x 255.x.x.x

    field_centrix 192.x.x.x 255.x.x.255
      
    field_centrix_internal 10.x.x.x 255.128.x.x

    internal 192.x.x.x 255.255.255.0 

    Wireless Matrix 12.x.x.x 255.x.x.255  

    Any 0.0.0.0 0.0.0.0

    vpn connection:
    field_centrix external  Wireless Matrix field_centrix_internal 

    pfs=no
    secure assoc=ike
    auth method=secret
    secret=**********
    local interface=external
    local subnet=field_centrix
    remote ip=wireless matrix
    remote subnet=field_centrix_internal

    ike debugging=on
    vpn=on
Children
No Data
Unfiltered HTML