This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN Roadwarrior behind ASL to ASL

Hi,

have following problem: How it is possible to connect a VPN roadwarrior with SSH Sentinel, which is installed on a PC in a LAN behind an Astaro V4 to another Astaro V4.
In this case, the VPN tunnel should terminate on the one side at the Sentinel VPN Client in the secured LAN behind the one ASL, and on the other side on the Astaro V4, which is reachable over the internet.
Which ports/parameters have to be opened/set so the IPsec packets will be transmitted? The SSH Sentinel diagnostic program work fine on IKA phase 1 but fails at phase 2...

Hope you can help me!!!

Best regards,
nkoch

This thread was automatically locked due to age.

Parents

0 quasar3c279 over 21 years ago

hi,

you have to enable nat-t on the ssh-sentinel and on the remote astaro. on your local astaro you have to allow port 4500, because it's used by nat-t.

with this settings it works fine...

regards,
mario
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 quasar3c279 over 21 years ago

hi,

you have to enable nat-t on the ssh-sentinel and on the remote astaro. on your local astaro you have to allow port 4500, because it's used by nat-t.

with this settings it works fine...

regards,
mario
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 NilsKoch over 21 years ago in reply to quasar3c279

Hi,

thank you for your answer. Do you ment that port 4500 has to be opened from LAN to EXTERNAL network or the other way round?

Best regards,
nkoch
Cancel
Vote Up 0 Vote Down

Cancel