[Vpn-help] ubuntu Linux + shrewsoft 2.1 issue connecting tonetscreen
Zöller, Benjamin
Benjamin.Zoeller at salt-solutions.de
Thu Apr 16 07:19:25 CDT 2009
Zöller, Benjamin wrote:
> It depends on your configuration but the difference between your and
> my config is.
>
> General: Auto Configuration: ike config push
> Authentication: Remote Identity -> IP-Address <-- If you did not
> specify remote identy, use IP-Address Phase2: Transform Algorithm ->
> don't use auto <-- I think this is the biggest problem
> Policy: Maintain Persisten Security Associations <-- If the tunnel
> goes up, but there is no traffic, use this
>
>
>
>
> Stephen Davies wrote:
>> There is the config file exported.
>> Thank you for this
>>
>>
>> On Tue, 2009-04-07 at 14:58 +0200, Zöller, Benjamin wrote:
>>> Could you export your client configuration and send me these one.
>>> You could change your GatewayIP and PSK of course.
>>>
>>> Stephen Davies wrote:
>>>> Thanks for your quick response Benjamin
>>>>
>>>> What information do you require about the client?
>>>> it is a compaq 2133 laptop running ubuntu 8.10 ipsec-tool
>>>> 1:0.7-2.1ubuntu1 shrewsoft is 2.1.0+dfsg-1
>>>>
>>>> Stephen
>>>>
>>>> Zöller wrote:
>>>>> Hi Stephen,
>>>>> if you give me more info about your client configuration, I think
>>>>> I can help you.
>>>>>
>>>>> Benjamin
>>>>>
>>>>>
>>>>> Stephen Davies wrote:
>>>>>
>>>>>> Hi all,
>>>>>>
>>>>>> I was hoping someone could help. I am having an issue connecting
>>>>>> my laptop to my offices netscreen firewall using a dial up VPN.
>>>>>> The laptop is running Ubuntu 8.10 with shrewsoft VPN client 2.1
>>>>>> The firewall I am trying to connecting to is a netscreen-204
>>>>>> with firmware 5.4.0r6.0
>>>>>>
>>>>>> The message the netscreen give me whilst trying to connect is
>>>>>> "Phase 1: Responder starts AGGRESSIVE mode negotiations." and
>>>>>> just sits there.
>>>>>>
>>>>>> The linux laptop disconnects instantly with the error "Invalid
>>>>>> message from gateway".
>>>>>>
>>>>>> this there anywhere in the linux client where I can obtain a
>>>>>> better view of what the Invalid message is?
>>>>>>
>>>>>>
>>>>>> The VPN is a standard mutual psk vpn.
>>>>>>
>>>>>> Any assistance would be great fully received.
>>>>>>
>>>>>> Stephen Davies
>>>>>> _______________________________________________
>>>>>> vpn-help mailing list
>>>>>> vpn-help at lists.shrew.net
>>>>>> http://lists.shrew.net/mailman/listinfo/vpn-help
More information about the vpn-help
mailing list