Tom, You don't need to enable the IPsec VPN plugin, that is done automatically, as the comment in the plugin states.
You mentioned you were getting a gui error message, don't ignore that, tell me more about that. Can you post a *sanitized* screen shot like Michael did, Michael's example is a good one. Lonnie On Apr 3, 2012, at 8:39 AM, Tom Chadwin wrote: > Well, I’ve discovered one reason why it is currently not working. A power cut > at the remote site. *sigh* > > I’ll try again once things are back up again. > > Thanks for all the help > > Tom > > > From: Michael Keuter [mailto:li...@mksolutions.info] > Sent: 03 April 2012 13:45 > To: nnpait.servi...@googlemail.com > Subject: Re: [Astlinux-users] OpenVPN config > > > Am 03.04.2012 um 14:19 schrieb Tom Chadwin: > > > OK. I've enabled that plug-in (by the way, the config file says "# > Automatically enabled when AstLinux IPsec Associations are defined" which > didn't happen). I still get the same response to a ping, though: "Operation > not permitted". > > Yes, it says so, but for me it wasn't enabled. > It sounds for me like firewall issues. Try restarting the FW with the plugin > manually enabled, then restart IPSec. > Can you ping the WAN IPs from both ends (allow ping on the ext. IP in the FW > config)? > Maybe the IPs are banned by adaptive-ban-plugin … > > > Any ideas > > Tom > > It works for me with the attached settings plus the ipsec-fw-plugin, nothing > more. > > Michael > > http://www.mksolutions.info ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Astlinux-users mailing list Astlinux-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to pay...@krisk.org.
