This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN connection to Astaro Security Gateway using Shrew VPN

Hello,

I need to establish an IPSec VPN connection to an Astaro Security Gateway using the Shrew VPN Client or some other free client. I already tried many configurations (Astaro ASG und Shrew VPN :: network lab, https://community.sophos.com/products/unified-threat-management/astaroorg/f/58/t/53198) but I don't get it done.

Establishing the Connection via the Astaro Secure Client is no problem.

According to the Shrew VPN Trace, the IKE Key Exchange is not successful

 cookies 2a5f434157790c3b:0000000000000000
10/05/28 10:21:40 >= : message 00000000
10/05/28 10:21:40 -> : send IKE packet ***.***.***.***:500 -> ***.***.***.***:500 ( 1012 bytes )
10/05/28 10:21:40 DB : phase1 resend event scheduled ( ref count = 2 )
10/05/28 10:21:45 -> : resend 1 phase1 packet(s) ***.***.***.***:500 -> ***.***.***.***:500
10/05/28 10:21:50 -> : resend 1 phase1 packet(s) ***.***.***.***:500 -> ***.***.***.***:500
10/05/28 10:21:55 -> : resend 1 phase1 packet(s) ***.***.***.***:500 -> ***.***.***.***:500
10/05/28 10:22:00 ii : resend limit exceeded for phase1 exchange

Because of my paranoia i had to obfuscate the IPs [:)]

I am happy about every hint and tip.

THX a lot

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago

How about the IPsec log from the Astaro? Also, is the Astaro behind another device doing NAT?

Cheers - Bob
PS "Obfuscate" - it's the perfect word, but you'll have most English-only speakers googling for the definition![;)]
Cancel
Vote Up 0 Vote Down

Cancel
0 Pinas over 15 years ago in reply to BAlfson
Hi, the problem is that I do not have access to the astaro. I am an on an internship (requiered at university) and my job is to establish a vpn connection to an extern vpn with free software (i thought this job takes max. 20 min). This extern company uses an astaro - i already asked them about alternative software, but they have no idea.

Actually I think that I took a step further, the log now says:

10/05/31 08:15:25 -> : send IKE packet ***.***.***.***:500 -> ***.***.***.***:500 ( 312 bytes )
10/05/31 08:15:25 DB : phase1 resend event scheduled ( ref count = 2 )
10/05/31 08:15:25 ***.***.***.***:500 ( 40 bytes )
10/05/31 08:15:25 DB : phase1 found
10/05/31 08:15:25 ii : processing informational packet ( 40 bytes )
10/05/31 08:15:25 = ***.***.***.***:500
10/05/31 08:15:25 ii : - isakmp spi = none
10/05/31 08:15:25 ii : - data size 0

Thx a lot
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Pinas over 15 years ago in reply to BAlfson
Hi, the problem is that I do not have access to the astaro. I am an on an internship (requiered at university) and my job is to establish a vpn connection to an extern vpn with free software (i thought this job takes max. 20 min). This extern company uses an astaro - i already asked them about alternative software, but they have no idea.

Actually I think that I took a step further, the log now says:

10/05/31 08:15:25 -> : send IKE packet ***.***.***.***:500 -> ***.***.***.***:500 ( 312 bytes )
10/05/31 08:15:25 DB : phase1 resend event scheduled ( ref count = 2 )
10/05/31 08:15:25 ***.***.***.***:500 ( 40 bytes )
10/05/31 08:15:25 DB : phase1 found
10/05/31 08:15:25 ii : processing informational packet ( 40 bytes )
10/05/31 08:15:25 = ***.***.***.***:500
10/05/31 08:15:25 ii : - isakmp spi = none
10/05/31 08:15:25 ii : - data size 0

Thx a lot
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data