This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec Client to ASL4 or 5 behind a ASL4

Hi,

I have the problem, that connecting to a ASL4 or 5 from behind another ASL 4 doesn't work. But with the same configuration from directly works without problems. NAT is on both machines active.

Anybody had the same problems?

Thanks,
Henrik

This thread was automatically locked due to age.

Parents

0 bagira over 21 years ago

Henrik,
ensure, that NAT-T is enabled on your IPSec Client and your ASL. Please also have a look, that port 4500 is allowed on the client side ASL.
Post the logs from the ASL, which is your remote endpoint.

Cheers bagira
Cancel
Vote Up 0 Vote Down

Cancel
0 Matjaz over 21 years ago in reply to bagira

Make sure you have GRE protocol alowed from the side of your client.

BR, Matjaz
Cancel
Vote Up 0 Vote Down

Cancel
0 bagira over 21 years ago in reply to Matjaz

Are we talking about a VPN over IPSec or PPTP?
If you use PPTP, Matjaz is right GRE has to be allowed. But if you use IPSec, ensure that ESP is allowed on your Client side.
/bagira
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 bagira over 21 years ago in reply to Matjaz

Are we talking about a VPN over IPSec or PPTP?
If you use PPTP, Matjaz is right GRE has to be allowed. But if you use IPSec, ensure that ESP is allowed on your Client side.
/bagira
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data