<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Great !!,. It works !<br><br>Thanks a million<br><br><div>> Date: Tue, 28 Jun 2011 22:54:40 -0400<br>> From: kvpn@live.com<br>> To: vpn-help@lists.shrew.net<br>> Subject: Re: [vpn-help] Simple shrew dialup vpn user with SSG-140 does not works - Please Help<br>> <br>> On Tue, 28 Jun 2011 07:21:09 +0200<br>> Francisco Javier Morales López de Gamarra <fmorales_htw@hotmail.com><br>> wrote:<br>> <br>> > <br>> > Please, any help would be very appreciated<br>> > <br>> > > From: fmorales_htw@hotmail.com<br>> > > To: vpn-help@lists.shrew.net<br>> > > Date: Mon, 27 Jun 2011 09:29:17 +0200<br>> > > Subject: [vpn-help] Simple shrew dialup vpn user with SSG-140 does<br>> > > not works - Please Help<br>> > > <br>> > > <br>> > > Hi, I am trying to setup a simple dial-up vpn user with shrew and<br>> > > Juniper SSG-140 using the tutorial <br>> > > http://www.shrew.net/support/wiki/HowtoJuniperSsg<br>> > > <br>> > > <br>> > > but it does not works....<br>> > > <br>> > > <br>> > > I always get the following error:<br>> > > <br>> > > 2011-06-27 09:15:45 info IKE<88.xxxxxxxx>: XAuth login was aborted<br>> > > for gateway <vpnclient_gateway>, username <joe>, retry: 0.<br>> > > 2011-06-27 09:15:39 info Rejected an IKE packet on ethernet0/9 from<br>> > > 88.xxxxxxxx:58125 to 62.XXx.XXX.XXX:4500 with cookies<br>> > > 429c1915bb026bce and c125368ff8ef5fb4 because a Phase 2 packet<br>> > > arrived while XAuth was still pending. 2011-06-27 09:15:39 info<br>> > > IKE<88.2.163.210> Phase 1: Completed Aggressive mode negotiations<br>> > > with a <28800>-second lifetime. 2011-06-27 09:15:39 info<br>> ...<br>> > > <br>> > > Here is my shrew file:<br>> > > <br>> > > n:version:2<br>> > > n:network-ike-port:500<br>> ...<br>> > > s:client-auto-mode:pull<br>> > > s:client-iface:virtual<br>> > > s:network-natt-mode:enable<br>> > > s:network-frag-mode:enable<br>> > > s:auth-method:mutual-psk-xauth<br>> ...<br>> > > <br>> > > Any help would be very appreciated.<br>> > > <br>> <br>> Hi Francisco,<br>> <br>> In the Shrew site config, change the Auto Configuration to "ike config<br>> push". If you're editing the config file by hand, change <br>> s:client-auto-mode:pull to s:client-auto-mode:push<br>> _______________________________________________<br>> vpn-help mailing list<br>> vpn-help@lists.shrew.net<br>> http://lists.shrew.net/mailman/listinfo/vpn-help<br></div> </div></body>
</html>