This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BIG BIG Problem with VPn Site to Site (RSA KEy)

i have 2 astaro (5.203 and 6.001) i want to create a vpn site-to-site rsa key, this the situation:

Internal Network--External (public IP)--internet--Router(ip public)--external (private)--LAN

I have follow the instruction on the knowledge base, but nothing the 2 astaro can't comunicate.
In the router i have forwarded 500 and 4500 port, but nothing..
What can i do? Please it is very important

This thread was automatically locked due to age.

Parents

0 NimmdirKeks over 20 years ago

Hi,

can you see any com attempts? Maybee your router is blocking ipsec, had a few routers, well long ago, that could not handle ESP or AH protocol.

Chris
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 NimmdirKeks over 20 years ago

Hi,

can you see any com attempts? Maybee your router is blocking ipsec, had a few routers, well long ago, that could not handle ESP or AH protocol.

Chris
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 riky_bo over 20 years ago in reply to NimmdirKeks

where can i find if my router block ipsec o esp?
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 20 years ago in reply to riky_bo

Hi,

can you post the ipsec.log?

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Xeno over 20 years ago in reply to riky_bo

First of all, have a look to the logfile of both ASL's. Post the interesting part.
If your router makes masquerading and provides a function called IPsec passthrough, disable that one (don't disable masquerading).

Xeno
Cancel
Vote Up 0 Vote Down

Cancel