This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Does IPSec (Cisco VPN Client) "Send all traffic/Encrypt entire connection)

Alright, this might sound stupid, but i've search Wiki, Google for IPSec on whether is it being encrypted thoughout the entire VPN session
or
it's just mutual authentication and the connection is only encrypted when connecting to intranet.

because when connected via iPhone (Remote Access > Cisco VPN Client),
when pointing my web browser to What Is My IP Address? Lookup IP, Hide IP, Change IP, Trace IP and more... , i see my 3G/HSPA's IP address and my cell phone carrier instead of my broadband's IP address and ISP.

So i guess the entire session of IPSec (not L2TP over IPSec) is not encrypted except that it's used for authentication and encryption to intranet?

This thread was automatically locked due to age.

0 BarryG over 14 years ago

Hi,
You need to add "Internet" to the "local networks" setting in the Astaro VPN settings.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Light Peak over 14 years ago in reply to BarryG

Hi,
You need to add "Internet" to the "local networks" setting in the Astaro VPN settings.

Barry

Hi, now it doesn't work:

Safari cannot open thepage because it is not connected to the Internet.

the entire issue is located at http://www.astaro.org/astaro-gateway-products/vpn-site-site-remote-access/38881-cisco-vpn-client-android-connects-but-no-internet-iphone-error.html
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 14 years ago

Hi, do you have a Masquerading rule setup for the VPN Pool, and packetfilter rules to allow the traffic out?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Light Peak over 14 years ago

Network security > Masquerading > New Masq Rule
Network Pool: VPN Pool (Cisco)
Interface: External (WAN)

Another Masq:
Network Pool: VPN Pool (L2TP)
Interface: External (WAN)

Another Masq:
Network Pool: johndoe (User Network)
Interface: External (WAN)

hi,
yup, i did. refer ^

oh, btw, i followed:
http://www.astaro.com/lists/ASGV8-L2TP-VPN-en.pdf for http://www.astaro.org/astaro-gateway-products/vpn-site-site-remote-access/38881-cisco-vpn-client-android-connects-but-no-internet-iphone-error.html
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 14 years ago

And you have "auto packetfilter rule" checked?

Check the packetfilter and IPS logs too.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Light Peak over 14 years ago

You mean "automatic Firewall rule"?
Yes

Ive tried disabling ips as well but to no avail too.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 14 years ago

[...] IPSec on whether is it being encrypted thoughout the entire VPN session or it's just mutual authentication and the connection is only encrypted when connecting to intranet.

Once the Cisco Client establishes an IPsec VPN connection with the Astaro (the same is true for all Astaro VPNs), ALL of the traffic between the client and the Astaro is encrypted.

As Barry said, if you want the Internet traffic to go through an IPsec (or SSL VPN) connection, you must configure the Astaro with "Internet" or "Any" in 'Local networks'. To allow the remote client to browse via the Astaro, the traffic must be permitted with a Firewall rule like 'VPN Pool (Cisco) -> Web Surfing -> Any : Allow' or via the HTTP/S Proxy by adding, for example, "VPN Pool (Cisco)" to 'Allowed networks'.

You might play around with that and see if you can't solve your problem.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Light Peak over 14 years ago

hmm, okay. i've configured "Any" in "Local Networks".
it works, just that sometimes i do get "Negotiation with the VPN server failed."
Cancel
Vote Up 0 Vote Down

Cancel
0 Light Peak over 13 years ago

bump~ not such a bad forum support does astaro have, does it?
Cancel
Vote Up 0 Vote Down

Cancel