This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec Connections PSK

Hi,
i have serveral problems to establish a connection between to lans.The Lans have both dynamic ip´s. The PSK is allways the same.I use the IPSEc Policy: 3DES.In addition to,the configuration is on both sides the same.But if i open the VPN Conn. i come different error messages:

"roes_1": 192.168.xxxx/xx===xxx.xxx.xxx.xxx...xxx.xxx.xxx.xxx===192.168.xx.xxx/xxx
000 "roes_1":   ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "roes_1":   policy: PSK+ENCRYPT+TUNNEL; interface: eth1; unrouted
000 "roes_1":   newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
000 "roes_1":   IKE algorithms wanted: 5_000-1-5, flags=-strict
000 "roes_1":   IKE algorithms found:  5_192-1_128-5,
000 "roes_1":   ESP algorithms wanted: 3_000-1, flags=-strict
000 "roes_1":   ESP algorithms loaded: 3_168-1_128,

Both firewalls have the same config.,the same ipsec policy and the same psk.
What is possible for a correct connection and why does`nt work it.

Thanx and regards

This thread was automatically locked due to age.

Parents

0 orhan over 22 years ago

did you read the manual at http://docs.astaro.org/guidebooks/Guidebook-US-ASL-V4_psk_net-to-net.pdf
this doc shows how to config with examples.
Cancel
Vote Up 0 Vote Down

Cancel
0 Truth over 22 years ago in reply to orhan

Hello...

Have a question.. are the Internal networks in the same Subnet? Like...

192.168.1.0 > 192.168.1.0 ?

When its true, then you must change one of this subnet to another subnet like..

192.168.1.0 > 192.168.2.0

We had the same problem like a B - Class Network

172.16.0.0 > 172.16.0.0

This doent work by us, we have the greatest problems and malfunctions in the Tunnel, but the Tunnel itself works..

We have fix this problem, that one of the two internal Networks go in another subnet like..

172.16.0.0 > 172.17.0.0

I hope this are the problem that you have and wish you enough power to fix the problem ;-)

Regards
truth
Cancel
Vote Up 0 Vote Down

Cancel
0 christianwitty over 22 years ago in reply to Truth

Yes,my Internal net is in the Same Subnet.But the tunnel worked perfect.But since the last Update from Astaro 3 to 4,to tunnel is established but no communication available. The Properties on both sides are exactly the same.
Cancel
Vote Up 0 Vote Down

Cancel
0 Udo_Seiler over 22 years ago in reply to christianwitty

Hi christianwitty,

there was something new from ASL 3 to ASL 4.
When I'm right, there was the need for paketfilter rules which allows the traffic pass trough the tunnel.
Have a look at your logfiles please.
Are you sure the connection is established?
Did you have a automatically generated route on both sides?

HTH

Regards

Udo Seiler
Cancel
Vote Up 0 Vote Down

Cancel
0 gnujuba over 22 years ago in reply to christianwitty

hi, look at these post , maybe they will help:

http://www.astaro.org/showflat.php?Cat=&Number=30651&page=2&view=collapsed&sb=5&o=&fpart=1

https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/t/39578

http://www.astaro.org/showflat.php?Cat=&Number=30507&page=0&view=collapsed&sb=5&o=&fpart=1

greets,

gnjb
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 gnujuba over 22 years ago in reply to christianwitty

hi, look at these post , maybe they will help:

http://www.astaro.org/showflat.php?Cat=&Number=30651&page=2&view=collapsed&sb=5&o=&fpart=1

https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/t/39578

http://www.astaro.org/showflat.php?Cat=&Number=30507&page=0&view=collapsed&sb=5&o=&fpart=1

greets,

gnjb
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data