<html><body><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div>I am having trouble connecting to my VPN on a Linksys BEFSX41 which was flashed to latest firmware version. I keep getting a "negotiation timeout occurred" when trying to bring up the tunnel. Logs on the BEFSX41 indicate the VPN client is trying to connect. Logs on the vpn client indicate that resend limit exceeded for phase1. </div>
<div> </div>
<div>Not sure what I have configed wrong so all details are below.</div>
<div> </div>
<div>Settings on router:</div>
<div> </div>
<div>IPSEC Passthrough > Enabled</div>
<div>PPOE Passthough > Enabled</div>
<div>PPTP Passthrough > Enabled</div>
<div> </div>
<div>Local Secure Group > Subnet x.x.x.x.</div>
<div>Remote Secure Group > Any</div>
<div>Remote Security Gateway > Any</div>
<div>Encryption > DES</div>
<div>Authentication > MD5</div>
<div>Key Management > Auto (IKE)</div>
<div> </div><divRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">ADVANCED SETTINGS ></PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Phase 1: > Mode: Main mode</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Encryption: DES</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Authentication: MD5</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Group 768 Bit</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Key Lifetime: 3600 seconds</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0"> </PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Phase 2: > Encryption: DES</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Authentication: MD5</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">PFS: On</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Group: 768 Bit</PRE><PRE style="WIDOWS: 2; TEXT-TRANSFORM: none; FONT-VARIANT: normal; FONT-STYLE: normal; MARGIN-TOP: 0px; TEXT-INDENT: 0px; LETTER-SPACING: normal; ORPHANS: 2; COLOR: rgb(0,0,0); FONT-WEIGHT: normal; WORD-SPACING: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0" mce_style="-webkit-text-size-adjust:auto;-webkit-text-stroke-width:0;color:#000000;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;margin-top:0;orphans:2;text-align:start;text-indent:0;text-transform:none;widows:2;word-spacing:0">Key Lifetime: 3600 seconds</PRE>
<P>Other Setting</div>
<div>Netbios broadcast box checked</div>
<div> </div>
<div>Shrew Soft Client</div>
<div> </div>
<div>NAT Transversal: enable</div>
<div>NAT Transversal: port 4500</div>
<div>IKE Fragmentation: enable</div>
<div>Maximum packet size: 540 bytes</div>
<div> </div>
<div>Other Options</div>
<div>Enable Dead Peer Detection</div>
<div>Enable ISAKMP Failure Notifications</div>
<div>Enable Client Login Banner</div>
<div> </div>
<div>Name Resolution</div>
<div>All boxes checked</div>
<div> </div>
<div>Authentication Method: MutualPSK</div>
<div>Identification Type: IP Address</div>
<div>Remote Identity: IP Address</div>
<div>Credentials: Pre shared key</div>
<div> </div>
<div>Phase 1</div>
<div>Exchange Type: main</div>
<div>DH Exchange: group1</div>
<div>Cipher Algorithm: des</div>
<div>Hash Algorithm: md5</div>
<div>key life time limit: 3600 secs</div>
<div>key life data limit 0 kb</div>
<div> </div>
<div>Phase 2</div>
<div>Transform Algorithm: esp-des</div>
<div>HMAC Algorith: md5</div>
<div>PFS Exchange: group 1</div>
<div>key life time limit: 3600 secs</div>
<div>key life data limit 0 kb</div>
<div> </div>
<div>Policy</div>
<div>policy generation level: unique</div>
<div>obtain topology automatically or tunnel all checked</div>
<div> </div>
<div> </div>
<div>Rob</div>
<div> </div></span></body></html>