<div dir="ltr">Hi Matthew,<br><br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
1) Are you using a 32bit or 64bit build of Ubuntu?</blockquote><div><br>I am using 32bit build of Ubuntu.<br><br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
2) Have you tried the head version of the client from the public subversion repository to see if the problems exist there as well? You can obtain these sources via 'svn co svn://<a href="http://svn.shrew.net/ike/head" target="_blank">svn.shrew.net/ike/head</a>'.</blockquote>
<div><br>I tried the head version and now I am able to see FQDN, User FQDN options while editing.<br><br>With this head version, the tunnel gets established, but not able to ping or access the remote network behind the vpn router. I see that it adds the following entry to the routing table and so I am able to access only the public IP of the vpn router. Also, it doesn't delete this entry after disconnecting the tunnel<br>
<br>Destination Gateway Genmask Flags MSS Window irtt Iface<br><b>XX.XX.XX.XX <a href="http://192.168.1.1">192.168.1.1</a> <a href="http://255.255.255.255">255.255.255.255</a> UGH 0 0 0 eth0</b><br>
<a href="http://192.168.1.0">192.168.1.0</a> <a href="http://0.0.0.0">0.0.0.0</a> <a href="http://255.255.255.0">255.255.255.0</a> U 0 0 0 eth0<br><a href="http://169.254.0.0">169.254.0.0</a> <a href="http://0.0.0.0">0.0.0.0</a> <a href="http://255.255.0.0">255.255.0.0</a> U 0 0 0 eth0<br>
<a href="http://0.0.0.0">0.0.0.0</a> <a href="http://192.168.1.1">192.168.1.1</a> <a href="http://0.0.0.0">0.0.0.0</a> UG 0 0 0 eth0<br><br>Can you suggest why I am not able to access the remote network?<br>
<br>Also, does shrewsoft vpn client support connecting to GroupVPN tunnel. I tried connecting to the GroupVPN tunnel and it doesnt connect phase 2. Looks like it has PFS negotiation issue.<br><br><table width="100%" border="1" cellspacing="1">
<tbody><tr><td align="center">Aug 26 08:27:18 2008</td><td> VPN Log</td><td> we require PFS but Quick I1 SA specifies no GROUP_DESCRIPTION
</td></tr><tr><td align="center">Aug 26 08:27:28 2008</td><td> VPN Log</td><td>
Quick Mode I1 message is unacceptable because it uses a previously
used Message ID 0x71de5dbd (perhaps this is a duplicated packet)
</td></tr></tbody></table><br><br>To summarize, connecting to GroupVPN tunnel has group2 pfs issue and connecting to one-to-one tunnel is able to establish the tunnel, but able to access the remote network.<br><br>Best Regards<br>
Prakash<br></div></div><br></div>