<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Courier;
panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Book Antiqua";
panose-1:2 4 6 2 5 3 5 3 3 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:black;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:black;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
tt
{mso-style-priority:99;
font-family:"Courier New";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{mso-style-name:msochpdefault;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.emailstyle17
{mso-style-name:emailstyle17;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=black vlink=black>
<div class=WordSection1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I posted this quite a while back (below). My issues with the HP
Broadcom based wireless card is fixed. Turns out my Win 7 Pro 32bit installed
a “Microsoft Virtual WiFi Miniport Adapter” and apparently it is bound to the Broadcom
adapter and not the USB wireless adapters I have plugged in over time.
Searching the web, this Virtual miniport is so you can run an adhoc network at
the same time you are on connected to an access point. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Anyway, just disabling the virtual miniport (didn’t uninstall
it, just disabled it) was the trick. Shrew works just fine over wireless now.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'>Nathan Morrow<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Book Antiqua","serif";
color:#1F497D'>540-898-0757<o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Nathan Morrow <br>
<b>Sent:</b> Wednesday, August 18, 2010 12:24 AM<br>
<b>To:</b> vpn-help@lists.shrew.net<br>
<b>Subject:</b> RE: [vpn-help] Shrew Cleint with Netgear FVX538<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Well, I am still not finding easy as a word with VPNs.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Here is where I am:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>1.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> Apparently there is an issue using the wireless adapter in
my HP (Broadcom based). When using Ethernet I actually connect and get
communications on both ends. On the wireless I see stuff in the shrew
trace log, but nothing at the server. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Is there any way to use the built in wireless card.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>If I try to use the netgear example on the shrew website (ike
config pull), I get<o:p></o:p></span></p>
<p class=MsoNormal style='text-indent:.5in'><span style='font-size:9.0pt;
font-family:Courier;color:maroon'>config message type is invalid for pull
config” <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>in the shrew trace log and <o:p></o:p></span></p>
<p class=MsoNormal style='text-indent:.5in'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>[IKE] ISAKMP-SA established
for WORKIP[4500]-REMOTEIP[4500] with spi:2a66a846b45e6422:7b1231493b23d4cb_<o:p></o:p></span></p>
<p class=MsoNormal style='text-indent:.5in'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>[IKE] Sending Informational
Exchange: notify payload[INITIAL-CONTACT]_<o:p></o:p></span></p>
<p class=MsoNormal style='text-indent:.5in'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>[IKE] Short payload_<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>in the netgear log.<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>Not sure what needs to change
on the client side to make it a valid config.<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>3.<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>If I change that mode to “Ike
config push” and actually fill in all the necessary info in the shrew client
that was set to auto, it gets much further, but then I get <o:p></o:p></span></p>
<p class=MsoNormal style='text-indent:.5in;text-autospace:none'><span
style='font-size:9.0pt;font-family:Courier'>resend 1 phase2 packet(s)
192.168.50.132:4500 -> WORKIP:4500</span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'> in the shrew trace
log. And </span><span style='font-size:9.0pt;font-family:Courier'><o:p></o:p></span></p>
<p class=MsoNormal style='text-indent:.5in;text-autospace:none'><span
style='font-size:9.0pt;font-family:Courier'>No policy found: 192.168.2.5/32[0]
192.168.0.0/24[0] proto=any dir=in_ 2010 Aug 18 04:16:57 [SpotswoodFVX538]
[IKE] Failed to get proposal for responder._<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'>in the netgear log. Not sure
if I am hosing everything with that change. But I did get further.<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;
font-family:Courier'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>As always, any help is appreciated. I am running 2.1.6
with DPD turned off on both ends.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D'>Nathan Morrow<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Book Antiqua","serif";
color:#1F497D'>540-898-0757<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> mikelupo@aol.com
[mailto:mikelupo@aol.com] <br>
<b>Sent:</b> Friday, July 30, 2010 5:22 PM<br>
<b>To:</b> Nathan Morrow; vpn-help@lists.shrew.net<br>
<b>Subject:</b> Re: [vpn-help] Shrew Cleint with Netgear FVX538<o:p></o:p></span></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Like you, I know litte about VPNs but I managed to get a Netgear
FVS318G set up and working with Shrew.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>What does your network topography look like? If there's nothing in
the VPN logs, then I call to question if your packets are even getting there...<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>As a quick test, you can also configure your client PC into
the local router's DMZ and try again. If you get further along (i.e. VPN
log entries on the FVS), then that may indicate the gateway/router you're using
to connecting to the internet might not be configured for VPN passthrough
or port forwarding/triggering for ports 500 and 4500 might need some
consideration. <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><br>
<br>
<o:p></o:p></span></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:black'>-----Original Message-----<br>
From: Nathan Morrow <nmorrow@spotswood.org><br>
To: vpn-help@lists.shrew.net <vpn-help@lists.shrew.net><br>
Sent: Fri, Jul 30, 2010 3:50 pm<br>
Subject: [vpn-help] Shrew Cleint with Netgear FVX538<o:p></o:p></span></p>
<div id="AOLMsgPart_3_32a24c42-a7a1-418d-9988-971a54ce784b">
<div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>So I am pretty knowledgable when it comes to networking, dhcp,
dns, etc, etc. But not VPNs. I followed the procedure for Netgear
VPNs to the T (except for IPs and encryption algorithm) and I don’t believe I
am getting anywhere fast.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>The local Shrew Client tries to contact the VPN gateway, and it
looks like there is on response after the initial handshakes:<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:Courier;color:navy'>10/07/30
15:31:32 >= : message 00000000</span><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:Courier;color:green'>10/07/30
15:31:37 -> : resend 1 phase1 packet(s) 192.168.1.2:500 ->
GATEWAYIPWUZHERE:500</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:Courier;color:green'>10/07/30
15:31:42 -> : resend 1 phase1 packet(s) 192.168.1.2:500 ->
GATEWAYIPWUZHERE:500</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:Courier;color:green'>10/07/30
15:31:47 -> : resend 1 phase1 packet(s) 192.168.1.2:500 ->
GATEWAYIPWUZHERE:500</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:Courier;color:black'>10/07/30
15:31:52 ii : resend limit exceeded for phase1 exchange</span><span
style='font-size:10.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:Courier;color:black'>10/07/30
15:31:52 ii : phase1 removal before expire time</span><span style='font-size:
10.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>On the VPN side (Netgear FVX538):<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Nothing in the VPN log. I’m lost. <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>A good next step to try would be appreciated.<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Nathan Morrow<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Book Antiqua","serif";
color:black'>Director of Technical Ministries</span><span style='font-size:
10.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Book Antiqua","serif";
color:black'>Spotswood Baptist Church</span><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Book Antiqua","serif";
color:black'>4009 Lafayette Blvd</span><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Book Antiqua","serif";
color:black'>Fredericksburg, Va 22408</span><span style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Book Antiqua","serif";
color:black'>540-898-0757</span><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Book Antiqua","serif";
color:black'>F: 540-891-7549</span><span style='font-size:10.0pt;font-family:
"Arial","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
</div>
</div>
<div id="AOLMsgPart_4_32a24c42-a7a1-418d-9988-971a54ce784b"><pre
style='background:white'><tt><span style='color:black'>_______________________________________________</span><o:p></o:p></tt></pre><pre
style='background:white'><tt><span style='color:black'>vpn-help mailing list<o:p></o:p></span></tt></pre><pre
style='background:white'><tt><span style='color:black'>vpn-help@lists.shrew.net<o:p></o:p></span></tt></pre><pre
style='background:white'><tt><span style='color:black'>http://lists.shrew.net/mailman/listinfo/vpn-help<o:p></o:p></span></tt></pre></div>
</div>
</div>
</body>
</html>