[vpn-help] Problem with setup of Netgear FVS318G and shrew client

[Matthew Grooms]

On 8/24/2010 5:46 PM, Robbie Gibson wrote:
> I’ve been trying to setup a vpn using shrew 2.1.6 to connect to a
> netgear fvs318g router from other computers outside the network. I
> followed the netgear setup tutorial
> http://shrew.net/support/wiki/HowtoNetgear and have it to a point where
> it says it connects but on the router side on the vpn connection status
> tab I get “ipsec sa not established” on client side using the vpn trace
> under security policies I get 2 ipsec policies and no secutiry
> associations. Attached are the 3 logs from the trace program. I have
> also attached the mode config page from the router and the ike policy
> from the router.
>

Your trying to use a VPN client pool of 192.168.2.0/24 to reach the 
network of 192.168.2.0/0. That won't work. If the network behind the 
router is 192.168.1.0/24 ( looks like it might be since your WINS and 
DNS servers are set to 192.168.1.1 ), then the "Traffic Tunnel Security 
Level" section of your router should have the local IP/Subnet mask set 
to 192.168.1.0/255.255.255.0 and not 192.168.2.0/255.255.255.0. This is 
all in the howto.

-Matthew