[vpn-help] centos 5.5 -> ssg5

[aurfalien at gmail.com]

On Dec 3, 2010, at 2:45 PM, Matthew Grooms wrote:

> On 12/2/2010 2:20 PM, aurfalien at gmail.com wrote:
>> Hi all,
>>
>> Having a lot of trouble getting Shrew working on Centos so that it
>> connects to an SSG5.
>>
>> Read some docs here;
>>
>> http://www.shrew.net/support/wiki/HowtoJuniperSsg
>>
>> Also tried other VPN clients for perhaps better debug and it looks  
>> to be
>> my OS which is the issue regarding NAT support in the kernel?
>>
>> Any one mind shedding some light on how I can get this working?
>>
>
> What happens when you try to connect? I'm not aware of a IPsec VPN  
> client that has better debug facilities than the Shrew Soft client.  
> Maybe I'm bias :) Have a look at the iked.conf man page ...
>
>             log_file quoted;
>                     The path and file name that should be used for  
> log outâ
>                     put.
>             log_level (none | error | info | debug | loud | decode);
>                     The log output detail level. The default value  
> for this
>                     parameter is none.
>             pcap_decrypt quoted;
>                     The path and file name that should be used to dump
>                     decrypted ike packets in pcap format. If no  
> pcap_ike
>                     statement is specified, this feature is disabled.
>             pcap_encrypt quoted;
>                     The path and file name that should be used to dump
>                     encrypted ike packets in pcap format. If no  
> pcap_pub
>                     statement is specified, this feature is disabled.
>
> ... and this article in our support wiki ...
>
> http://www.shrew.net/support/wiki/BugReportVpnUnix


Thanks for the link Matthew.

- aurf
>
>
> -Matthew