Hi On 23 Apr 2004 at 16:52, Charles Steinkuehler wrote about "Re: [leaf-user] IPsec between FreeS/WAN 1.91 (Dac":
> Timothy J. Massey wrote: > > Hello! > > > > I'm using a Dachstein firewall with FreeS/WAN 1.91. I would like to set up an > > IPsec VPN with either a Linksys BEFVP41 router, or a Windows 2000 computer > > behind it. > > > > I have been unable to do either. The router won't negotiate a tunnel > > with the LEAF firewall, and I can't seem to make the IPsec passthrough > > work, either. The Windows 2000 computer does work if plug it into the > > Internet directly, but not from behind the router. > > > > Any ideas on what I could try? Even a success story would be enough: > > it would be nice to know that it's possible. > > [...] > > After a quick review of the Linksys manual for your box, it looks like > it should work fine as an IPSec gateway with Dachstein's IPSec, as long > as you get the configuration correct. Make sure you're selecting 3DES, > SHA, IKE (with perfect-forward-security), and have a properly setup > pre-shared key. > > You also need to verify the basic tunnel configuration is correct (ie: > subnet-subnet, host-host, or subnet-host) and the IP's/networks match on > both ends. > > There's probably useful information in the logs on both ends > (web-accessible on the Linksys, and in /var/log/auth.log on the > Dachstein box...also accessible via the web if you're running weblet). > > We could probably help a lot more with some additional debugging info > from the logs and details of your ipsec.conf from Dachstein and the > configuration settings on the Linksys. You could also try an update to Windows 2000 with NAT-T enhacements published bt M$ a year ago http://support.microsoft.com/default.aspx?scid=kb;en-us;818043#6 Note that the article states you need Windows 2000 Service pack 3 or greater but it doesn't says if the update got bundled with the Service Pack 4. Regards, - Ramiro ------------------------------------------------------- This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek For a limited time only, get FREE Ground shipping on all orders of $35 or more. Hurry up and shop folks, this offer expires April 30th! http://www.thinkgeek.com/freeshipping/?cpg=12297 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
