<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
The 5GT is only allowing one connection, you need to create a group
do the IKE ID and then create a IKE user with more than 1
connections allowed.<br>
<br>
Regards,<br>
<br>
Rui Cordeiro<br>
<br>
On 11/17/2010 11:35 AM, Laurence Neville wrote:
<blockquote cite="mid:SNT132-w513FC636364CD7E173E272B9380@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
<p class="MsoNormal">I have successfully set up a VPN connection
to our Netscreen
5GT using Shrew 2.1.7. The client & firewall setup is
basically this:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoListParagraph" style="text-indent: -18pt;"><!--[if !supportLists]--><span
style="font-family: Symbol;"><span style="">·<span
style="font: 7pt "Times New Roman";">
</span></span></span><!--[endif]-->Single generic phase 1
and phase 2 configuration
including the same Pre-Shared Key (hidden), same local
identifier (fully
qualified domain name), same remote identifier (fully qualified
domain name)<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent: -18pt;"><!--[if !supportLists]--><span
style="font-family: Symbol;"><span style="">·<span
style="font: 7pt "Times New Roman";">
</span></span></span><!--[endif]-->Multiple XAUTH usernames
& passwords<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">The client is used on 2 PCs with identical
configs except
for the XAUTH username & password. <span style=""> </span>The
problem
is that if one is connected and the other attempts to connect,
the
first is disconnected with the message "session terminated by
gateway". Likewise, if the first user then tries to reconnect
then the
second user is disconnected. So, it looks like only one user can
be connected
at any time.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is this a known problem with this kind of
configuration? I
chose this config because I was unable to get the client to
connect at all when
each PC had its own PSK and ID …..<o:p></o:p></p>
<p class="MsoNormal"><br>
</p>
<p class="MsoNormal">Thanks</p>
<p class="MsoNormal"><br>
</p>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
vpn-help mailing list
<a class="moz-txt-link-abbreviated" href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>
<a class="moz-txt-link-freetext" href="http://lists.shrew.net/mailman/listinfo/vpn-help">http://lists.shrew.net/mailman/listinfo/vpn-help</a>
</pre>
</blockquote>
</body>
</html>