[vpn-help] Winodws Server 2019 get_vfwd - sendarp retry exceeded

[Spoetzl Matthias]

Hello,
i had a Problem with a new installation of the VPN Client V2.2 on an Windows Server 2019.

We connect to  the customer with a Fortinet VPN Client.
On this connection we connect with the ShrewSoft Client to the Firewall-router (192.168.12.10).

The configuration works on a virtual Windows 7 Machine, but on the Windows Server 2019 I can't connect .

I start the VPN Trace at both machines and have different entries after "local is CISCO UNITY compatible" and "send IKE packet 10.212.134.200:500 -> 192.168.12.10:500 ( 340 bytes )"
Windows 7 connection works

Windows Server 2019 connection does not work

20/06/18 10:06:28 >> : vendor id payload
20/06/18 10:06:28 ii : local is SHREW SOFT compatible
20/06/18 10:06:28 >> : vendor id payload
20/06/18 10:06:28 ii : local is NETSCREEN compatible
20/06/18 10:06:28 >> : vendor id payload
20/06/18 10:06:28 ii : local is SIDEWINDER compatible
20/06/18 10:06:28 >> : vendor id payload
20/06/18 10:06:28 ii : local is CISCO UNITY compatible


20/06/18 10:06:28 >= : cookies 4fc780c1b602553f:0000000000000000
20/06/18 10:06:28 >= : message 00000000
20/06/18 10:06:28 -> : send IKE packet 10.212.134.200:500 -> 192.168.12.10:500 ( 340 bytes )
20/06/18 10:06:28 DB : phase1 resend event scheduled ( ref count = 2 )




20/06/18 10:06:28 <- : recv IKE packet 192.168.12.10:500 -> 10.212.134.200:500 ( 136 bytes )
20/06/18 10:06:28 DB : phase1 found


20/06/18 10:07:30 >> : vendor id payload
20/06/18 10:07:30 ii : local is SHREW SOFT compatible
20/06/18 10:07:30 >> : vendor id payload
20/06/18 10:07:30 ii : local is NETSCREEN compatible
20/06/18 10:07:30 >> : vendor id payload
20/06/18 10:07:30 ii : local is SIDEWINDER compatible
20/06/18 10:07:30 >> : vendor id payload
20/06/18 10:07:30 ii : local is CISCO UNITY compatible
20/06/18 10:09:13 !! : get_vfwd - sendarp retry exceeded ( next 10.212.134.201 )
20/06/18 10:09:13 !! : no arp entry for dst : 192.168.12.10
20/06/18 10:09:13 >= : cookies d53fd3178199bfea:0000000000000000
20/06/18 10:09:13 >= : message 00000000
20/06/18 10:09:13 -> : send IKE packet 10.212.134.200:500 -> 192.168.12.10:500 ( 340 bytes )
20/06/18 10:10:56 !! : get_vfwd - sendarp retry exceeded ( next 10.212.134.201 )
20/06/18 10:10:56 !! : no arp entry for dst : 192.168.12.10
20/06/18 10:10:56 ii : phase1 removal before expire time
20/06/18 10:10:56 DB : phase1 deleted ( obj count = 0 )



What can I do??


Thanks

Matthias

ALPMA Alpenland Maschinenbau GmbH - Registergericht: Amtsgericht Traunstein, HRB 11720 - Gesch?ftsf?hrer: Gisbert Strohn - Frank Eberle - Postfach 20 - 83540 Rott am Inn - Telefon: (0 80 39) 4 01-0 - Telefax: (0 80 39) 4 01-3 96 - E-Mail: info at alpma.de - www.alpma.de
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20200618/7bd2dcf1/attachment.html>