<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi, <br>
<br>
I have just finished configuring a VPN connection against a Juniper
with version 5.4 and the data on the link is accurate and everything
worked fine.<br>
If you can send some print screens of the configs, Juniper and Shrew
Client I can try to help you (just delete sensitive info).<br>
<br>
Regards,<br>
<br>
Rui Cordeiro<br>
<br>
Igor Birman wrote:
<blockquote cite="mid:457545.97791.qm@web65411.mail.ac4.yahoo.com"
type="cite">
<style type="text/css"><!-- DIV {margin:0px;} --></style>
<div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">I
am trying to connect to an SSG5. I followed the guide:<br>
<div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;">
<div
style="font-family: times new roman,new york,times,serif; font-size: 12pt;">
<div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><br>
<span><span><a moz-do-not-send="true" target="_blank"
href="http://www.shrew.net/support/wiki/HowtoJuniperSsg">http://www.shrew.net/support/wiki/HowtoJuniperSsg</a></span></span><br>
<br>
but the client stops at "bringing up tunnel" and then hangs there
forever. On the server, I have the following messages:<br>
<br>
2010-06-24 07:47:03 info IKE<71.191.197.230>: Received
initial contact notification and removed Phase 1 SAs.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230>: Received
initial contact notification and removed Phase 2 SAs.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230>: Received a
notification message for DOI <1> <24578>
<INITIAL-CONTACT>.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1:
Completed Aggressive mode negotiations with a <28800>-second
lifetime.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1:
Completed for user <Test>.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: IKE
responder has detected NAT in front of the remote device.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: IKE
responder has detected NAT in front of the local device.<br>
2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1:
Responder starts AGGRESSIVE mode negotiations.<br>
<br>
What am I missing?<br>
<br>
<div>Thanks,<br>
Igor</div>
</div>
</div>
</div>
</div>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
vpn-help mailing list
<a class="moz-txt-link-abbreviated" href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>
<a class="moz-txt-link-freetext" href="http://lists.shrew.net/mailman/listinfo/vpn-help">http://lists.shrew.net/mailman/listinfo/vpn-help</a>
</pre>
</blockquote>
</body>
</html>