Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN site-to-site ipsec with router BILLION 7402GX problems

Hi.

I have configured a VPN tunnel between my ASTARO UTM 9 in principal office and a remote router BILLION 7402GX.
In ASTARO i configured:
Name: VPN
Remote Gateway: 


Authentication type: Preshared KEY
Key: 123
Repeat:
VPN ID type: IP ADDRESS
VPN ID (optional):
Remote Networks: (Remote OFFICE IP Range)


Local Interface: External FO
Policy:

Name:
IKE encryption algorithm:3DES
IKE authentication algorithm: SHA1
IKE SA lifetime: 28800
IKE DH group: Group2 MODP 1024
IPsec encryption algorithm: 3DES
IPsec authentication algorithm: SHA1
IPsec SA lifetime: 28800
IPsec PFS group: Group2 MODP 1024
Strict policy: NO
Compression: NO


Local Networks: Internal0 (Network)
Automatic Firewall Rules: YES
Strict Routing: NO
Bind Tunnel to Local Interface: YES

I configured in BILLION Router:
Captura.jpg

But i can´t connect the VPN, ASTARO LOG give me 
2014:11:07-09:21:06 asg220 pluto[12552]: packet from 31.4.246.26:9403: initial Main Mode message received on 84.124.106.165:500 but no connection has been authorized with policy=PSK

I don´t know the problem and if is possible connect ASTARo and BILLION machines.
HELP!!!


This thread was automatically locked due to age.
Parents
  • Hi, Alex, and welcome to the User BB!

    The lifetimes in the UTM are in seconds - neither of those match the Billion.  You also must agree on Dead Peer Detection, but I don't see that on the Billion page.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Hi, Alex, and welcome to the User BB!

    The lifetimes in the UTM are in seconds - neither of those match the Billion.  You also must agree on Dead Peer Detection, but I don't see that on the Billion page.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data