Hi
On 23 Apr 2004 at 16:52, Charles Steinkuehler wrote about "Re: [leaf-user] IPsec
between FreeS/WAN 1.91 (Dac":
> Timothy J. Massey wrote:
> > Hello!
> >
> > I'm using a Dachstein firewall with FreeS/WAN 1.91. I would like to set up an
> > IPsec VPN with either a Linksys BEFVP41 router, or a Windows 2000 computer
> > behind it.
> >
> > I have been unable to do either. The router won't negotiate a tunnel
> > with the LEAF firewall, and I can't seem to make the IPsec passthrough
> > work, either. The Windows 2000 computer does work if plug it into the
> > Internet directly, but not from behind the router.
> >
> > Any ideas on what I could try? Even a success story would be enough:
> > it would be nice to know that it's possible.
>
> [...]
>
> After a quick review of the Linksys manual for your box, it looks like
> it should work fine as an IPSec gateway with Dachstein's IPSec, as long
> as you get the configuration correct. Make sure you're selecting 3DES,
> SHA, IKE (with perfect-forward-security), and have a properly setup
> pre-shared key.
>
> You also need to verify the basic tunnel configuration is correct (ie:
> subnet-subnet, host-host, or subnet-host) and the IP's/networks match on
> both ends.
>
> There's probably useful information in the logs on both ends
> (web-accessible on the Linksys, and in /var/log/auth.log on the
> Dachstein box...also accessible via the web if you're running weblet).
>
> We could probably help a lot more with some additional debugging info
> from the logs and details of your ipsec.conf from Dachstein and the
> configuration settings on the Linksys.
You could also try an update to Windows 2000 with NAT-T enhacements
published bt M$ a year ago
http://support.microsoft.com/default.aspx?scid=kb;en-us;818043#6
Note that the article states you need Windows 2000 Service pack 3 or
greater but it doesn't says if the update got bundled with the Service
Pack 4.
Regards,
-
Ramiro
---
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
