[vpn-help] Problems using shrew to connect to ns5gt

[kevin vpn]

On Sun, 6 Mar 2011 01:04:46 +0100
"Thorsten Steffen" <t.steffen at gmx.de> wrote:

> Hi guys,
> there was a mistake in my client configuration, the addressing method
> was set "use an existing adapter ...".
> After setting it to "Use a virtual adapter ..." everything worked
> fine.
> 
> Many thanks,
> Thorsten
> 
> 
> 
> -----Ursprüngliche Nachricht-----
> Von: vpn-help-bounces at lists.shrew.net
> [mailto:vpn-help-bounces at lists.shrew.net] Im Auftrag von kevin vpn
> Gesendet: Samstag, 5. März 2011 05:11
> An: vpn-help at lists.shrew.net
> Betreff: Re: [vpn-help] Problems using shrew to connect to ns5gt
> 
> On Sun, 27 Feb 2011 15:50:11 +0100
> "Thorsten Steffen" <t.steffen at gmx.de> wrote:
> 
> > Hi guys,
> > 
> > I'm trying to connect to Juniper NS5GT (Hardware Version: 1010,
> > Firmware Version:6.2.0r2.0 Firewall+VPN) with Shrew VPN Client 2.1.7
> > (running on Win7 64bit) without success.
> > 
> > I used http://www.shrew.net/support/wiki/HowtoJuniperSsg to
> > configure both sides.
> > 
> ...
> > 
> > I think "xauth login FAILED. gw <vpnclient_gateway>, username
> > <thorsten>, retry: 0, timeout: 1" is the relevant message.
> > 
> >  
> 
> Hi Thorsten,
> 
> You're right that the Juniper logs suggest that the problem is at the
> XAuth authentication step.
> 
> I'd double-check the steps you performed when configuring the user on
> the SSG device (section "Create Local User Accounts" in the HowTo).
> Most especially, check the password you entered.
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
> 

Hi Thorsten,

You're right, there it is in the original Shrew config file you posted "s:client-iface:direct" instead of "s:client-iface:virtual".

It's interesting to note that the Juniper returns the same error for a auto-configuration failure as for an incorrect username/password combination.  I guess it's just a generic message for a failure at any part of the XAuth process.

Thanks for reporting back your success and what the problem was.