<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
Dear Support,<br>
<br>
I have been trying for some time to connect the ShrewVPN to a
Juniper gateway at my work place, from Linux Mint (64 bit) at home.
And have recently upgraded to the latest version of Mint (10 -
Julia) and still having no luck. (Previously was on version 9, and
all attempts at connection have been over wireless).<br>
<br>
The GUI says the VPN has connected, and while connected I lose all
internet access, but equally I still do not have any access to my
work place.. nothing on my office LAN replies to pings, nor can I
rdesktop to our office terminal server etc.<br>
<br>
The same .pcf file works fine from a Windows XP VM I have on this
machine, which I hope rules out a mismatch of .pcf vs gateway
settings, or anything to do with my home internet access. Meaning
it must be something to do with my Linux install, but I'm too much
of a newbie on Linux to have any idea what to do next !<br>
<br>
Here is the result of sudo iked -F -d 6<font face="Courier New,
Courier, monospace"><br>
ii : created ike socket 0.0.0.0:500<br>
ii : created natt socket 0.0.0.0:4500<br>
## : IKE Daemon, ver 2.1.5<br>
## : Copyright 2009 Shrew Soft Inc.<br>
## : This product linked OpenSSL 0.9.8o 01 Jun 2010<br>
K! : recv X_SPDDUMP message failure ( errno = 2 )<br>
!! : peer violates RFC, transform number mismatch ( 1 != 6 )<br>
!! : peer violates RFC, transform number mismatch ( 1 != 5 )</font><br>
<br>
<br>
And that's all I get, it just sits there after that with the client
saying it's connected but with no access to anything :(<br>
<br>
Very many thanks for your help, .pcf settings below.<br>
<br>
Kind regards,<br>
Matt<br>
<br>
<br>
.pcf settings (with sensitive information obscured):<font
face="Courier New, Courier, monospace"><br>
n:version:2
<br>
n:network-ike-port:500
<br>
n:network-mtu-size:1380
<br>
n:client-addr-auto:1
<br>
n:network-natt-port:4500
<br>
n:network-natt-rate:15
<br>
n:network-frag-size:540
<br>
n:network-dpd-enable:1
<br>
n:client-banner-enable:0
<br>
n:network-notify-enable:1
<br>
n:client-wins-used:0
<br>
n:client-wins-auto:0
<br>
n:client-dns-used:1
<br>
n:client-dns-auto:1
<br>
n:client-splitdns-used:1
<br>
n:client-splitdns-auto:1
<br>
n:phase1-dhgroup:2
<br>
n:phase1-life-secs:28800
<br>
n:phase1-life-kbytes:0
<br>
n:vendor-chkpt-enable:0
<br>
n:phase2-life-secs:3600
<br>
n:phase2-life-kbytes:0
<br>
n:policy-nailed:0
<br>
n:policy-list-auto:0
<br>
s:network-host:xx.xx.xx.xx
<br>
s:client-auto-mode:push
<br>
s:client-iface:virtual
<br>
s:network-natt-mode:enable
<br>
s:network-frag-mode:enable
<br>
s:auth-method:mutual-psk-xauth
<br>
s:ident-client-type:fqdn
<br>
s:ident-server-type:fqdn
<br>
s:ident-client-data:xxxxx.xxxxxxxx.co.uk
<br>
s:ident-server-data:xxxxxx.xxxxxxxx.co.uk
<br>
b:auth-mutual-psk:xxxxxxxxxxx
<br>
s:phase1-exchange:aggressive
<br>
s:phase1-cipher:auto
<br>
s:phase1-hash:auto
<br>
s:phase2-transform:auto
<br>
s:phase2-hmac:auto
<br>
s:ipcomp-transform:disabled
<br>
n:phase2-pfsgroup:-1
<br>
s:policy-list-include:192.168.230.0 / 255.255.255.0</font>
</body>
</html>