Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 467 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem with VPN from ASL 4.009 to 3com Secure GW

Pyro411_01
I'm currently working on an Astaro 4.009 box that has a VPN connection to a 3com Cable/DSL Secure Gateway.  The problem I'm experiencing is anything behind the firewall can not contact anything behind the 3com unless a device behind the 3com starts communication "IE a constant ping to a device behind the ASL Box" The problem being... when a constant ping goes, it'll send about 27 pings then drop 3 & restart the VPN connection.  I'm not sure if I just missed something simple but a bit of the info of my setup is below.

ASL box...
192.168.0.0/255.255.255.0 Endpoint "Ext IP"

3com
192.16.1.0/255.255.255.0 Endpoint "Ext IP on diff ISP"

Setup to use Standard VPN, with 3des & a PSK

on the ASL box... basic Masq is going... Int-Net to Ext-Interface.  I've tried to add routes statically from point to point but that had no effect either way.  The rules have been setup on both ends to allow the proper networks in/out.

Any help would be welcomed & helpful.

Thanks.  [:)]  


This thread was automatically locked due to age.
Parents
  • 0
    Andrew,

    if the remote side is a dynamic assigned address it is clear that Asatro cannot establish the connection itself. Once a tunnel is up it should be up permanently - maybe there is a problem with IKE or rekeying or whatever. If you use PFS, switch it of as first meassure. Check the vpn logs for suspicious entries.


    Greetings
    cyclops
      
Reply
  • 0
    Andrew,

    if the remote side is a dynamic assigned address it is clear that Asatro cannot establish the connection itself. Once a tunnel is up it should be up permanently - maybe there is a problem with IKE or rekeying or whatever. If you use PFS, switch it of as first meassure. Check the vpn logs for suspicious entries.


    Greetings
    cyclops
      
Children
No Data
Cookie Information Banner