[vpn-help] Shrew Cleint with Netgear FVX538

[mikelupo at aol.com]

Like you, I know litte about VPNs but I managed to get a Netgear FVS318G set up and working with Shrew.
What does your network topography look like? If there's nothing in the VPN logs, then I call to question if your packets are even getting there...
As a quick test, you can also configure your client PC into the local router's DMZ and try again. If you get further along (i.e. VPN log entries on the FVS), then that may indicate the gateway/router you're using to connecting to the internet might not be configured for VPN passthrough or port forwarding/triggering for ports 500 and 4500 might need some consideration. 








-----Original Message-----
From: Nathan Morrow <nmorrow at spotswood.org>
To: vpn-help at lists.shrew.net <vpn-help at lists.shrew.net>
Sent: Fri, Jul 30, 2010 3:50 pm
Subject: [vpn-help] Shrew Cleint with Netgear FVX538



So I am pretty knowledgable when it comes to networking, dhcp, dns, etc, etc.  But not VPNs.  I followed the procedure for Netgear VPNs to the T (except for IPs and encryption algorithm) and I don’t believe I am getting anywhere fast.
 
The local Shrew Client tries to contact the VPN gateway, and it looks like there is on response after the initial handshakes:
10/07/30 15:31:32 >= : message 00000000
10/07/30 15:31:37 -> : resend 1 phase1 packet(s) 192.168.1.2:500 -> GATEWAYIPWUZHERE:500
10/07/30 15:31:42 -> : resend 1 phase1 packet(s) 192.168.1.2:500 -> GATEWAYIPWUZHERE:500
10/07/30 15:31:47 -> : resend 1 phase1 packet(s) 192.168.1.2:500 -> GATEWAYIPWUZHERE:500
10/07/30 15:31:52 ii : resend limit exceeded for phase1 exchange
10/07/30 15:31:52 ii : phase1 removal before expire time
 
On the VPN side (Netgear FVX538):
Nothing in the VPN log.  I’m lost.  
 
A good next step to try would be appreciated.
 
Nathan Morrow
Director of Technical Ministries
Spotswood Baptist Church
4009 Lafayette Blvd
Fredericksburg, Va 22408
540-898-0757
F: 540-891-7549
 


_______________________________________________
pn-help mailing list
pn-help at lists.shrew.net
ttp://lists.shrew.net/mailman/listinfo/vpn-help

=
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20100730/cc559064/attachment-0002.html>