Great !!,. It works ! Thanks a million
> Date: Tue, 28 Jun 2011 22:54:40 -0400 > From: [email protected] > To: [email protected] > Subject: Re: [vpn-help] Simple shrew dialup vpn user with SSG-140 does not > works - Please Help > > On Tue, 28 Jun 2011 07:21:09 +0200 > Francisco Javier Morales López de Gamarra <[email protected]> > wrote: > > > > > Please, any help would be very appreciated > > > > > From: [email protected] > > > To: [email protected] > > > Date: Mon, 27 Jun 2011 09:29:17 +0200 > > > Subject: [vpn-help] Simple shrew dialup vpn user with SSG-140 does > > > not works - Please Help > > > > > > > > > Hi, I am trying to setup a simple dial-up vpn user with shrew and > > > Juniper SSG-140 using the tutorial > > > http://www.shrew.net/support/wiki/HowtoJuniperSsg > > > > > > > > > but it does not works.... > > > > > > > > > I always get the following error: > > > > > > 2011-06-27 09:15:45 info IKE<88.xxxxxxxx>: XAuth login was aborted > > > for gateway <vpnclient_gateway>, username <joe>, retry: 0. > > > 2011-06-27 09:15:39 info Rejected an IKE packet on ethernet0/9 from > > > 88.xxxxxxxx:58125 to 62.XXx.XXX.XXX:4500 with cookies > > > 429c1915bb026bce and c125368ff8ef5fb4 because a Phase 2 packet > > > arrived while XAuth was still pending. 2011-06-27 09:15:39 info > > > IKE<88.2.163.210> Phase 1: Completed Aggressive mode negotiations > > > with a <28800>-second lifetime. 2011-06-27 09:15:39 info > ... > > > > > > Here is my shrew file: > > > > > > n:version:2 > > > n:network-ike-port:500 > ... > > > s:client-auto-mode:pull > > > s:client-iface:virtual > > > s:network-natt-mode:enable > > > s:network-frag-mode:enable > > > s:auth-method:mutual-psk-xauth > ... > > > > > > Any help would be very appreciated. > > > > > Hi Francisco, > > In the Shrew site config, change the Auto Configuration to "ike config > push". If you're editing the config file by hand, change > s:client-auto-mode:pull to s:client-auto-mode:push > _______________________________________________ > vpn-help mailing list > [email protected] > http://lists.shrew.net/mailman/listinfo/vpn-help
_______________________________________________ vpn-help mailing list [email protected] http://lists.shrew.net/mailman/listinfo/vpn-help
