I have set up l2TP over IPSec VPN in Astaro at my work.
At home I have an iMac which I have managed to get to connect to the Astaro VPN (using the Network panel in System Preferences).
But Apple's Remote Desktop will not see any of the computers at the office and vice-versa. It is like we are not actually connected, even though both the Mac and Astaro think we are. The Astaro Dashboard says "Remote Access is active with 1 online users" Or something is blocking things.
Using Mac OS X 10.5.5 Leopard.
Astaro's IPSec VPN log says:
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: received Vendor ID payload [RFC 3947]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [4df37928e9fc4fd1b3262170d515c662]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2008:12:12-11:27:13 (none) pluto[27406]: packet from 114.76.13.145:500: received Vendor ID payload [Dead Peer Detection]
2008:12:12-11:27:13 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_1"[11] 114.76.13.145 #37: responding to Main Mode from unknown peer 114.76.13.145
2008:12:12-11:27:13 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_1"[11] 114.76.13.145 #37: NAT-Traversal: Result using RFC 3947: peer is NATed
2008:12:12-11:27:13 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_1"[11] 114.76.13.145 #37: Peer ID is ID_IPV4_ADDR: '192.168.0.250'
2008:12:12-11:27:13 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_1"[12] 114.76.13.145 #37: deleting connection "D_REF_ZsaEIHMFYo_1" instance with peer 114.76.13.145 {isakmp=#0/ipsec=#0}
2008:12:12-11:27:13 (none) pluto[27406]: | NAT-T: new mapping 114.76.13.145:500/38128)
2008:12:12-11:27:13 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_1"[12] 114.76.13.145:38128 #37: sent MR3, ISAKMP SA established
2008:12:12-11:27:13 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_1"[12] 114.76.13.145:38128 #37: ignoring informational payload, type IPSEC_INITIAL_CONTACT
2008:12:12-11:27:14 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_0"[4] 114.76.13.145:38128 #38: responding to Quick Mode
2008:12:12-11:27:15 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_0"[4] 114.76.13.145:38128 #38: Dead Peer Detection (RFC 3706) enabled
2008:12:12-11:27:15 (none) pluto[27406]: "D_REF_ZsaEIHMFYo_0"[4] 114.76.13.145:38128 #38: IPsec SA established {ESP=>0x0b9b3853 /dev/pts/0
2008:12:12-11:27:19 (none) pppd-l2tp[22746]: Cannot determine ethernet address for proxy ARP
2008:12:12-11:27:19 (none) pppd-l2tp[22746]: local IP address 10.242.3.1
2008:12:12-11:27:19 (none) pppd-l2tp[22746]: remote IP address 10.242.3.2
2008:12:12-11:27:19 (none) pppd-l2tp[22746]: id="2201" severity="info" sys="SecureNet" sub="vpn" event="Connection started" username="James" variant="l2tp" srcip="114.76.13.145" virtual_ip="10.242.3.2"
2008:12:12-11:27:37 (none) pluto[27406]: ERROR: asynchronous network error report on ppp0 for message to 114.76.13.145 port 43045, complainant 114.76.13.145: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
2008:12:12-11:28:17 (none) pluto[27406]: ERROR: asynchronous network error report on ppp0 for message to 114.76.13.145 port 43045, complainant 114.76.13.145: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
Does anyone have any suggestions?
The router is an Apple Time Capsule.
Thanks,
James.
This thread was automatically locked due to age.