VPN: Site to Site and Remote Access Site to site using IPSec can not establish

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 6 replies
Subscribers 1 subscriber
Views 3557 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site to site using IPSec can not establish

phanhotri over 12 years ago

Hi everyone, i have problem about estalish vpn site to site using IPsec between two asg 220.

Information Firewall 1 :

ImageShack

- Online Photo and Video Hosting

ImageShack

- Online Photo and Video Hosting

ImageShack

- Online Photo and Video Hosting

ImageShack

- Online Photo and Video Hosting

Information Firewall 2 :

5.JPG

6.JPG

7.JPG

8.JPG

Did I miss something ? Please help. Thanks

This thread was automatically locked due to age.

0 phanhotri over 12 years ago

Anyone help me hic hic
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 12 years ago

Hi, what's the difference between your WAN / eth2 connections and your VPN / eth1 connections?

Do you have multiple ISPs?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 phanhotri over 12 years ago

Thanks for answer BarryG, you're right, i have multiple ISPs. Both firewall converter connect directly to eth2 ( firewall 1 ) and eth1 ( firewall 2 ). Did I miss some steps ? How to solve ? Waiting your answer ....
Cancel
Vote Up 0 Vote Down

Cancel
0 papa__01 over 12 years ago in reply to phanhotri

Your default gateway goes to eht2.
Did you add a route for the IPSec connection via eth1?
Cancel
Vote Up 0 Vote Down

Cancel
0 phanhotri over 12 years ago

How to route, can you guide me ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

I can't think of why you would need a route...

One site uses AES-128, and the other uses AES-256. If fixing that doesn't solve the problem, then it's time to look at the IPsec log to see when the connection attempt fails.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel