[vpn-help] 2- Shrew 2.5.1 and Draytek Vigor 2710 VPN

[Karnin]

Additional info:
Today one of the windows clients has responsed once, there seems to be a
time out problem:
-------
Host-Informationen für "192.168.215.100":
  Hostname:    ???
  IP-Adresse:  192.168.215.100

Sende 3 Ping(s) mit 32 Byte an "192.168.215.100", Timeout sind 5000 ms:

  1. Antwort von 192.168.215.100: 53 ms, Daten korrekt.
  2. Antwort von 192.168.215.100: Zeitüberschreitung.
  3. Antwort von 192.168.215.100: Zeitüberschreitung.

3 Ping(s) gesendet (1 korrekt, 0 fehlerhaft, 2 ohne Antwort).
------

Maybe it helps?
Hopefully,
Christoph


> Karnin wrote on Sunday, July 25, 2010 9:35 PM:
> Dear Clemens,
> thx for your hints.
> In my opinion there must be another reason for the faulty behaviour.
> 1. IP settings as gateway, dns, local IP on all workstations
> and the non-responding win2003-server are set without
> mistakes ;) , surfing is possible, Lan connections can be
> established in host subnet 192.168.112.0.
> 2. The firewall services ARE totally stopped (only for
> evaluation...) even at outgoing AND incoming systems and the routers.
> It is really boring because I doesn't have any idea how to
> localize the problem :(
> Thx once more,
> Christoph

>>> C.Hoffmann at ProSeS.de wrote on Sunday, July 25, 2010 4:09 PM:
>>> There are only two explanations, not related to the ShrewSoft
>>> client: 
>>> 1. Those workstations do not have the default gateway set
>>> appropriately. Unlikely, because they won't have Internet access
>>> then, which you certainly have checked.
>>> 2. The firewall on one or all sides is NOT switched off
>>> completely. You need to stop the service to get rid of the firewall.
 
>> Dear list members,
>> that's my novice report to vpn-help list, so please be patient with
>> me :) 
>> 
>> ## Client:
>> Windows XP Sp3
>> Shrew VPN client version = 2.1.5
>> Fritz!Box 7170 with DYNDNS.ORG-dynamic IP, ADSL
>> with Firmware 29.04.80
>> Client-subnet 192.168.112.0
>> 
>> ## Host:
>> Draytek Vigor 2710 with DYNDNS.ORG-dynamic IP, ADSL
>> with Firmware 3.3.5 Standard for AnnexB
>> Host-subnet 192.168.215.0
>> 
>> ## Setup according to:
>> http://draytek.de/Beispiele/VPN/ShrewSoft_Client.pdf
>> 
>> ## Problem:
>> esp-AES-Tunnel/Auth will be established without any problem.
>> Draytek Router/Gateway 192.168.215.1 at host side answers to ping,
>> router's admin-page can be accessed by IP adress => working.
>> A Synology diskstation DS207 (linux system!) 192.168.215.100 can be
>> pinged and accessed at host side => working.
>> 
>> BUT:
>> Not pingable or accessible are the windows machines in subnet
>> 192.168.215.0: 
>> -Windows 2003 Server Standard
>> -Windows XP Sp3
>> -Windows 98SE (only terminalclient)
>> 
>> Pings from Draytek router to the windows clients in Host-subnet
>> 192.168.215.0 are working. 
>> 
>> Firewalls are switched off for exploration purposes.
>> 
>> Problem is reproducable on different Windows XP Sp3-clients (Subnet
>> 192.168.112.0). 
>> 
>> Really mysterious......
>> 
>> Any hint for us?
>> 
>> Thx and best regards,
>> Christoph