Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 4403 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Watchguard

jakyll
I am having no luck making my ASL4 box talk to a remote Watchguard soho6....  the username on the watchguard is treated like an email address, but doesn't allow for the @ symbol... so the username could be   "frank"

On the astaro, if you use frank as a vpn identifier, it says its an illegal email addy.....

Can anyone please post a HOWTO or something for me?  This is so frustrating since I'm at the reach of my abilities here.

thanks,
d   


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Chris Lynch
    on the watchguard the username is   vpn-discovery
    on the astaro I named the vpn connection the same, and tried to set the local vpn identified to the email vpn-dscovery , but this was rejected... so I used hostname of vpn-discovery instead  
Children
  • 0 in reply to jakyll
    this is what i get for status - its vpn-discover not discovery... sorry

    000  
    000 "vpn-discover_1": 192.168.120.1...24.235.140.117
    000 "vpn-discover_1":   ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
    000 "vpn-discover_1":   policy: PSK+ENCRYPT+TUNNEL+PFS; interface: eth1; unrouted
    000 "vpn-discover_1":   newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
    000 "vpn-discover_1":   IKE algorithms wanted: 5_000-1-1, flags=-strict
    000 "vpn-discover_1":   IKE algorithms found:  5_192-1_128-1, 
    000 "vpn-discover_1":   ESP algorithms wanted: 3_000-1, ; pfsgroup=1; flags=-strict
    000 "vpn-discover_1":   ESP algorithms loaded: 3_168-1_128, 
    000  
    000 #5: "vpn-discover_1" STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 3s
    000  

    Local endpoint: internal (ive tried external too)
    remote endpoint: their extyernal IP

    Subnets - I've left blank for now - any sort of connection would be nice and i can go from there 
Cookie Information Banner