On Dec 3, 2010, at 2:45 PM, Matthew Grooms wrote:

On 12/2/2010 2:20 PM, [email protected] wrote:
Hi all,

Having a lot of trouble getting Shrew working on Centos so that it
connects to an SSG5.

Read some docs here;

http://www.shrew.net/support/wiki/HowtoJuniperSsg

Also tried other VPN clients for perhaps better debug and it looks to be
my OS which is the issue regarding NAT support in the kernel?

Any one mind shedding some light on how I can get this working?


What happens when you try to connect? I'm not aware of a IPsec VPN client that has better debug facilities than the Shrew Soft client. Maybe I'm bias :) Have a look at the iked.conf man page ...

            log_file quoted;
The path and file name that should be used for log outâ
                    put.
            log_level (none | error | info | debug | loud | decode);
The log output detail level. The default value for this
                    parameter is none.
            pcap_decrypt quoted;
                    The path and file name that should be used to dump
decrypted ike packets in pcap format. If no pcap_ike
                    statement is specified, this feature is disabled.
            pcap_encrypt quoted;
                    The path and file name that should be used to dump
encrypted ike packets in pcap format. If no pcap_pub
                    statement is specified, this feature is disabled.

... and this article in our support wiki ...

http://www.shrew.net/support/wiki/BugReportVpnUnix


Thanks for the link Matthew.

- aurf


-Matthew

_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help

Reply via email to