[vpn-help] new user, fairly baffled

[Howard Spindel]

Fabio,

I shouldn't need a Dynamic DNS service as I have a static IP for my 
Netgear router.

So, how would I make this work with the DG834, and what additional 
software do I need?  The Netgear config panels don't talk about it 
being a VPN pass-through - they make it sound like a VPN endpoint.

If I'm going to have to buy a different router to make this work, 
what router do folks like?  (I need it with a DSL modem built-in too).

Thanks,
Howard

At 05:05 AM 3/7/2011, Fabio Cigoj wrote:
>Howard,
>
>The DG834 is a VPN-passthough in first place, not a VPN-endpoint, 
>which would force you set up a VPN server.
> From my gatherings, collected from qualified people like the author 
> of Shrew, it seems that Netgear uses quite an old VPN stack, but 
> there are better and worse routers.
>I use a 338, which, far from being perfect for my needs is a 
>VPN-endpoint, I managed to make work in much a similar config as the 
>one you need.
>The trick is to register with a (free) dynamic DNS service both your 
>router and your laptop, so every time you connect to internet the 
>name of your machines has the correct IP address assigned. At that 
>point you can use the FQDN (fully qualified domain name) in the VPN config.
>It looks complicated, but it is(n't)
>
>Cheers
>
>Fabio
>
>On Mon, Mar 7, 2011 at 1:31 PM, Howard Spindel 
><<mailto:howard at sci1.com>howard at sci1.com> wrote:
>In all likelihood, the laptop would no be directly connected  to the 
>internet. I would be at the mercy of whomever was providing a hot spot.
>
>Is there no way to get that to work?
>
>
>>Hi,
>>
>>You laptop is directly connected to Internet ? (no NAT). Because 
>>the NETGEAR DG834 support only the MAIN Mode... (and the VPN is buggy...)
>>
>>Regards,
>>
>>On Mon, Mar 7, 2011 at 11:32 AM, Howard Spindel 
>><<mailto:howard at sci1.com>howard at sci1.com> wrote:
>>I'm trying to setup a VPN that will allow me to connect in to my 
>>home network (with a Netgear DG834Gv4 facing the internet) from a 
>>Windows 7 laptop.
>>Can anyone provide a cookbook for setting the Netgear VPN settings 
>>and ShrewSoft VPN client that would enable the two to 
>>connect?  I've been tearing my hair trying all sorts of 
>>combinations, but can't get anything to work.  The VPN trace on the 
>>Win 7 laptop shows three attempts to send phase1 packets before it 
>>hits "resend limit exceeded for phase1 exchange" and aborts.
>>I am a computer programmer with 30 years experience and lots of 
>>networking experience, but I can't figure this one out!
>>Thanks,
>>Howard
>>Netgear policy page looks like this right now:
>>Remote VPN Endpoint: Dynamic IP address
>>Local LAN: IP address is set to my local subnet
>>Remote LAN: IP address is set to "Single PC - no subnet"
>>IKE direction: responder only (only choice allowed)
>>Exchange mode: Main mode (only choice allowed)
>>DH group: auto
>>Local ID type: WAN IP address
>>Remote ID type: FQDN
>>Encryption algorithm: 3DES
>>Authentication algorithm: auto
>>Using a pre-shared key for authentication
>>
>>
>>_______________________________________________
>>vpn-help mailing list
>><mailto:vpn-help at lists.shrew.net>vpn-help at lists.shrew.net
>>http://lists.shrew.net/mailman/listinfo/vpn-help
>
>
>_______________________________________________
>vpn-help mailing list
><mailto:vpn-help at lists.shrew.net>vpn-help at lists.shrew.net
>http://lists.shrew.net/mailman/listinfo/vpn-help
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20110307/72ab511e/attachment-0001.html>