Timothy J. Massey wrote:
Hello!

I'm using a Dachstein firewall with FreeS/WAN 1.91. I would like to set up an IPsec VPN with either a Linksys BEFVP41 router, or a Windows 2000 computer behind it.

I have been unable to do either. The router won't negotiate a tunnel with the LEAF firewall, and I can't seem to make the IPsec passthrough work, either. The Windows 2000 computer does work if plug it into the Internet directly, but not from behind the router.

Any ideas on what I could try? Even a success story would be enough: it would be nice to know that it's possible.

To be clear, the problem is entirely on the Linksys end (ie: the windows box that works when not behind the router is behind the linksys router, not the Dachstein box)?


Assuming an affirmative answer to the above, you'll need to setup the Linksys box in a VPN pass-through mode (I'm not sure if it supports this), or provide some details about how you're trying to get it to connect to the Dachstein box.

After a quick review of the Linksys manual for your box, it looks like it should work fine as an IPSec gateway with Dachstein's IPSec, as long as you get the configuration correct. Make sure you're selecting 3DES, SHA, IKE (with perfect-forward-security), and have a properly setup pre-shared key.

You also need to verify the basic tunnel configuration is correct (ie: subnet-subnet, host-host, or subnet-host) and the IP's/networks match on both ends.

There's probably useful information in the logs on both ends (web-accessible on the Linksys, and in /var/log/auth.log on the Dachstein box...also accessible via the web if you're running weblet).

We could probably help a lot more with some additional debugging info from the logs and details of your ipsec.conf from Dachstein and the configuration settings on the Linksys.

Also, is there a newer version of FreeS/WAN for Dachstein? I have some routing issues that is making the migration to Bering difficult at the moment...

Not That I'm aware of...


--
Charles Steinkuehler
[EMAIL PROTECTED]


------------------------------------------------------- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to