[vpn-help] VPN between shrew client and Zywall 2 plus

[Kevin VPN]

On 10/02/2011 01:33 PM, Francis Meyvis wrote:
> Hello,
>
> Following the guide at the support pages i succeeded setting up a
> tunnel between
> my ubuntu 10.04 client with shrew 2.1.5 and a Zywall 2 plus (latest firmware).
> But there does not seem any traffic going back through the Zywall to
> the shrew client.
>
> With wireshark I see that clients behind the zywall receive the
> incoming ping or sshd connection,
> but the ssh client does not seem to receive the reply. The same is for a ping.
> The machines behind the zywall firewall all have the zywall as their gateway.
>
> Anybody knows what might be going wrong.
> Anybody that could get past this issue?
> Are there special firewall rules?
>> From and to the VPN, all is permitted (I think these are default settings)
>
> I played with the NAT option on the shrew client and at the Zywall but
> that did not help.
> I'm using the tap0 not the network interface itself as this does not
> seem to work.
>

Hi Francis,

I'm not sure what to suggest for you.  I guess the first thing I'd check 
is to make sure you don't have overlapping IP ranges for your protected 
network (behind the Zywall) and the IPs given out to the VPN clients.

I'd also suggest getting a log capture from the Shrew client using these 
steps:
http://www.shrew.net/support/wiki/BugReportVpnUnix