Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 3484 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WiTopia IPsec VPN Troubles

APag96
I've been struggling with this for hours now. Does anyone have any *working* configuration or helpful information on how to successfully connect to a WiTopia IPsec server. I'm on the latest version of UTM. 

WiTopia Connection Info:

Gateway: ipsec.mci.witopia.net
PSK: witopia
Encryption: Up to AES-256
Hashing: SHA-1
Remote Subnet: 10.119.8.0/21
XAUTH: Yes. It's my account login info with a "W\" in front of the username


Here is my IPsec connection log:

2013:03:10-06:11:14 firewall pluto[17735]: forgetting secrets
2013:03:10-06:11:14 firewall pluto[17735]: loading secrets from "/etc/ipsec.secrets"
2013:03:10-06:11:14 firewall pluto[17735]: loaded PSK secret for 75.229.92.232 witopia
2013:03:10-06:11:14 firewall pluto[17735]: loaded XAUTH secret for W\134*******@*****.com witopia
2013:03:10-06:11:14 firewall pluto[17735]: loading ca certificates from '/etc/ipsec.d/cacerts'
2013:03:10-06:11:14 firewall pluto[17735]: loaded ca certificate from '/etc/ipsec.d/cacerts/VPN Signing CA.pem'
2013:03:10-06:11:14 firewall pluto[17735]: loading aa certificates from '/etc/ipsec.d/aacerts'
2013:03:10-06:11:14 firewall pluto[17735]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'
2013:03:10-06:11:14 firewall pluto[17735]: loading attribute certificates from '/etc/ipsec.d/acerts'
2013:03:10-06:11:14 firewall pluto[17735]: Changing to directory '/etc/ipsec.d/crls'
2013:03:10-06:12:21 firewall pluto[17735]: listening for IKE messages
2013:03:10-06:12:21 firewall pluto[17735]: forgetting secrets
2013:03:10-06:12:21 firewall pluto[17735]: loading secrets from "/etc/ipsec.secrets"
2013:03:10-06:12:21 firewall pluto[17735]: loaded XAUTH secret for W\134*******@*****.com 204.12.217.36
2013:03:10-06:12:21 firewall pluto[17735]: loaded PSK secret for 75.229.92.232 204.12.217.36
2013:03:10-06:12:21 firewall pluto[17735]: "S_WiTopia STL": deleting connection
2013:03:10-06:12:21 firewall pluto[17735]: "S_WiTopia STL" #1: deleting state (STATE_MAIN_I1)
2013:03:10-06:12:21 firewall pluto[17735]: added connection description "S_WiTopia STL"
2013:03:10-06:12:21 firewall pluto[17735]: "S_WiTopia STL" #2: initiating Main Mode
2013:03:10-06:12:21 firewall pluto[17735]: forgetting secrets
2013:03:10-06:12:21 firewall pluto[17735]: loading secrets from "/etc/ipsec.secrets"
2013:03:10-06:12:21 firewall pluto[17735]: loaded XAUTH secret for W\134*******@*****.com  204.12.217.36
2013:03:10-06:12:21 firewall pluto[17735]: loaded PSK secret for 75.229.92.232 204.12.217.36
2013:03:10-06:12:21 firewall pluto[17735]: loading ca certificates from '/etc/ipsec.d/cacerts'
2013:03:10-06:12:21 firewall pluto[17735]: loaded ca certificate from '/etc/ipsec.d/cacerts/VPN Signing CA.pem'
2013:03:10-06:12:21 firewall pluto[17735]: loading aa certificates from '/etc/ipsec.d/aacerts'
2013:03:10-06:12:21 firewall pluto[17735]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'
2013:03:10-06:12:21 firewall pluto[17735]: loading attribute certificates from '/etc/ipsec.d/acerts'
2013:03:10-06:12:21 firewall pluto[17735]: Changing to directory '/etc/ipsec.d/crls'
2013:03:10-06:25:32 firewall pluto[17735]: "S_WiTopia STL" #2: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2013:03:10-06:25:32 firewall pluto[17735]: "S_WiTopia STL" #2: starting keying attempt 2 of an unlimited number
2013:03:10-06:25:32 firewall pluto[17735]: "S_WiTopia STL" #3: initiating Main Mode to replace #2 


My Configuration: 



Please help. I'm desperate here.


This thread was automatically locked due to age.
Parents
  • 0
    No, that's the only option with the UTM since you have a USB WAN connection.  You're left with connecting one PC at a time using a local client.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    No, that's the only option with the UTM since you have a USB WAN connection.  You're left with connecting one PC at a time using a local client.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML