On 2/8/2011 7:15 AM, Steve Harrold wrote:
Hi,
I've been following the "how to setup a Netgear VPN client" guide, but
am struggling to connect to a netgear336GV2 VPN server. I'd really
appreciate any tips anyone can give.
I'm running the 2.17 linux version of the VPN access manager, and can
establish a tunnel, but the IPsec SA configuration is failing. If I run
the client daemon in foreground mode, the message I get is "K! :
unhandled pfkey message type EXPIRE ( 8 )". I have been assuming this is
a complaint about the PFS key, but don't understand why since I have
disabled PFS in both the server and client.
...
2011 Feb 8 12:37:43 [FVS336GV2] [IKE] Failed to get IPsec SA
configuration for: 0.0.0.192/0<->192.168.225.100/32 from
steve_remote.com_
I'm not sure where 0.0.0.192/0 is coming from. Do you have that
configured under the client policy tab?
I have had to disable the auto-configuration in the client because using
the recommended "ike pull" method brings up an "invalid message type"
response, but I don't think this is causing the problem as the correct
IP address is being assigned. The client address is on a different
subnet to the VPN server. It's the phase 2 negotiations which are failing.
Did you have a modecfg record configured? This is required for automatic
client configuration.
_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help
