On Wed, December 1, 2004 12:34 pm, Nick Rout said: > On Wed, December 1, 2004 12:18 pm, Steve Holdoway said: >> I'm trying to get vpn working into this installation, and it is just >> totally dead. I think the problem *might* be that I've set the red >> interface up incorrectly. >> >> As I'm behind an adsl router, > > So do i take it that both the adsl router, and the ipcop box are doing > NAT? > Correct. > You will know that you need to forweard whatever ports and protocols are > needed by your breed of VPN through the adsl router to the ipcop box. > I've scoured the interweb, and opened everything that *could* be used... to the best of my knowledge.
Protocols... 47, 50, 51. TCP ports: 10027, 10028 UDP Ports: 500, 1701, 2233, 10025, 10026, 10027. > > >> I've set the red interface up so it's a >> network connection, and given it an ip address adjacent > > > not sure what you mean by an "ip address adjacent" - adjacent to what? It's a Speedtouch router, so the default inside IP address is 10.0.0.138. I've set the outside ip address of the ipcop box to 10.0.0.139, and submet mask to 255.255.255.252. > > Frankly this double router/nat is a pain IMHO, you are better, if you can, > to get the ip address of the outside world onto the ipcop box, but whether > that is possible is dependent on the adsl-router device. What is the > device? i have some experience with various ones :-) It's an old Alcatel Speedtouch pro, rented from telstra clear. Software is at version 3.2 if that's any help. > > > >>to allow a very >> small subnet mask to be used. >> >> Should I have set it up differently... like using the external (static) >> ip >> address of the router in there somewhere? >> >> Everything apart from this vpn is working fine - both routing out, and >> pinholing ssh back in via both the router and the ipcop firewall. >> >> However, I can get no life whatsoever from the vpn ): >> >> Cheers, >> >> Steve >> >> >> -- >> Due to financial crisis the light at the end of the tunnel is switched >> off >> > > > Any suggestions will be gratefully received. Cheers, Steve -- Due to financial crisis the light at the end of the tunnel is switched off
