This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems mit Win XP VPN Client and more then 1user

I am running Astaro 6.200 and tried do setup L2TP over IPsec a couple of days ago. The Astaro KB had good manuals articles about that. So this wasn't a problem. Then I tried to connect from the outside with 2 different PCs at the same time. Only the first one could connect and the second one can’t get in. I disconnect the first one -> then the other one works. So it seems that only one connect at a time is working.

Has anyone got a clue what's wrong?

This thread was automatically locked due to age.

Parents

0 firebear_01 over 19 years ago

Hi,
your problem description sounds like " i use diferent PresharedKeys for users with dynamic-IPs ".
If you do so your ASLmay not find out wich client will use wich different vpn-profile. So you can :
1. use the same PSK and definition for all users with dynamic IPs,
2. use dyndns-Names and different PSK in the VPN-Definitions,
3. use X.509 Certificates for your VPN Clients.
where 3 is the best solution. 2 as next and 3 if nothing else works.
If the two users you have tried are the maximum it dont makes a difference wich solution you try.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 Smart79 over 19 years ago in reply to firebear_01

Hi Firebear,

thanks for the fast reply!!!

At the moment I am using the SAME preshared key for all users which are about 10-15. Or at least that’s the number which are supposed to use a VPN connection.
So you are saying solution 3 with X.509 Certificates is the best solution? Do you know if there is a manual how to setup such certificates?

Thank you for the help…

Martin
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Smart79 over 19 years ago in reply to firebear_01

Hi Firebear,

thanks for the fast reply!!!

At the moment I am using the SAME preshared key for all users which are about 10-15. Or at least that’s the number which are supposed to use a VPN connection.
So you are saying solution 3 with X.509 Certificates is the best solution? Do you know if there is a manual how to setup such certificates?

Thank you for the help…

Martin
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Smart79 over 19 years ago in reply to Smart79

I just noticed that I CAN establisdh more than one connection to Astaro. But only if the 2 clients come from different IPs !!!
Does anyone have an idea? [:S]
Why can't 2 clients connect from one location?
Cancel
Vote Up 0 Vote Down

Cancel
0 jjohnston62 over 19 years ago in reply to Smart79

Isn't that one of the limitations of L2TP over IPSec - the lack of NAT tranversal.....??? Isn't that a description of what you're trying to do?
Cancel
Vote Up 0 Vote Down

Cancel
0 Smart79 over 19 years ago in reply to jjohnston62

that could be... but I didn't know.....
I was hoping such things would be in the KB helpfiles
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 19 years ago in reply to Smart79

NATTraversal is activ for L2TP, but the Firewall can't seperate the two tunnels that come from the same IP, because they use the same ID (the PSK). So, use different keys for that clients. Then it should work.
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 19 years ago in reply to Smart79

Hi smart79,
sorry for late answering. The answer to your question is in the ASL-Knowledgebase and in the ASL-Dekumentation as example --http://www.astaro.com/kb/
  -- Astaro Security Gateway
     -- VPN
        -- SoftwareConfiguring Windows 2000/XP for L2TP over IPSec with X.509 certificates

and many more articles descibe the solutions better than i can.

firebear

--------
sorry i dont know the way to put in the URL of a single KB-Article
Cancel
Vote Up 0 Vote Down

Cancel