Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 2804 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Change IPSec VPN ID Type (V7.003)

Sammoe
Hi @all

Is there a way to change the VPN ID Type from IP Address to DNS or Email ?

I have the problem, that the other Firewall is a Zyxel with active dyndns IP. Always the Zyxel does change the IP, I loose the connection...

Thanks for your answers 

cheers sammoe


This thread was automatically locked due to age.
Parents
  • 0
    hi sammoe,
    there is no way arround a reconnect, when one side of the VPN tunnel gets a new ip address. But because of automatic rekeying, it should only take a view seconds for the new connection to be established?

    which authentication method do you use?

    regards
    Gert
  • 0 in reply to Gert Hansen
    Hi Gert

    Here's my configuration:

    Astaro
    ------
    Gateway type: initiate connection
    gateway: remote Gateway
    Authentication Type: preshared Key
    VPN ID Type: IP-Address (it is fix!!)
    VPN ID (optional): 
    Remote Networks: remote Net

    Zyxel
    -----

      IPSec Setup
      IPSec Key Mode            IKE
      Negotiation Mode   Main  
    Local:
    Local Address Type Subnet  
    IP Address Start   192.168.12.0  
    End / Subnet Mask 255.255.255.0  
    Remote:
    Remote Address Type   Subnet  
    IP Address Start   192.168.0.0  
    End / Subnet Mask 255.255.255.0  
           
    Local ID Type                IP
    Content                         194.55.22.254
    My IP Address               194.55.22.254
    Peer ID Type                IP
    Content                         194.55.10.254
    Secure Gateway IP Address 194.55.10.254
    Encapsulation Mode             Tunnel  
           
    Security Protocol
    VPN Protocol       ESP
    Pre-Shared Key     presharedkey
    VPN - Setup      3DES
    Authentication Algorithm  SHA-1  

    So the Problem is now the Local ID Type of Zyxel  need to be DNS. so I can insert the dyndns content. If I do that then Astaro can't connect to Zyxel.

    TIP: with V6 it was no problem...
Reply
  • 0 in reply to Gert Hansen
    Hi Gert

    Here's my configuration:

    Astaro
    ------
    Gateway type: initiate connection
    gateway: remote Gateway
    Authentication Type: preshared Key
    VPN ID Type: IP-Address (it is fix!!)
    VPN ID (optional): 
    Remote Networks: remote Net

    Zyxel
    -----

      IPSec Setup
      IPSec Key Mode            IKE
      Negotiation Mode   Main  
    Local:
    Local Address Type Subnet  
    IP Address Start   192.168.12.0  
    End / Subnet Mask 255.255.255.0  
    Remote:
    Remote Address Type   Subnet  
    IP Address Start   192.168.0.0  
    End / Subnet Mask 255.255.255.0  
           
    Local ID Type                IP
    Content                         194.55.22.254
    My IP Address               194.55.22.254
    Peer ID Type                IP
    Content                         194.55.10.254
    Secure Gateway IP Address 194.55.10.254
    Encapsulation Mode             Tunnel  
           
    Security Protocol
    VPN Protocol       ESP
    Pre-Shared Key     presharedkey
    VPN - Setup      3DES
    Authentication Algorithm  SHA-1  

    So the Problem is now the Local ID Type of Zyxel  need to be DNS. so I can insert the dyndns content. If I do that then Astaro can't connect to Zyxel.

    TIP: with V6 it was no problem...
Children
Cookie Information Banner