<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.E-mailStijl17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=NL link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-GB>LS,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>I would appreciate some help..<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Im using Shrewsoft VPN client version 2.2.1 on windows 8 to connect to a netscreen 5Gt running version 6.2.0r11.0.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>I can get it to work. </span><span lang=EN-GB style='font-family:Wingdings'>L</span><span lang=EN-GB>.. It connects but it does not passes any traffic.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>I have looked and configured as stated on the following links:<o:p></o:p></span></p><p class=MsoNormal><a href="https://www.shrew.net/support/Howto_Juniper_SSG"><span lang=EN-GB>https://www.shrew.net/support/Howto_Juniper_SSG</span></a><o:p></o:p></p><p class=MsoNormal><a href="http://www.the-internet-guy.com/pdf/Juniper_firewall_setup_for_Shrewsoft_VPN_connectivity.pdf">http://www.the-internet-guy.com/pdf/Juniper_firewall_setup_for_Shrewsoft_VPN_connectivity.pdf</a><o:p></o:p></p><p class=MsoNormal><a href="http://www.the-internet-guy.com/pdf/Shrew_VPN_Client_Setup_for_Juniper_Connectivity.pdf">http://www.the-internet-guy.com/pdf/Shrew_VPN_Client_Setup_for_Juniper_Connectivity.pdf</a><o:p></o:p></p><p class=MsoNormal><a href="http://kb.juniper.net/InfoCenter/index?page=content&id=KB22074">http://kb.juniper.net/InfoCenter/index?page=content&id=KB22074</a><o:p></o:p></p><p class=MsoNormal><a href="http://kb.juniper.net/InfoCenter/index?page=content&id=KB15272">http://kb.juniper.net/InfoCenter/index?page=content&id=KB15272</a><o:p></o:p></p><p class=MsoNormal><b><o:p> </o:p></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-GB>furthermore I have done a lot of debugging with no positive results.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Below the configs.. I have deleted or modified any info which could breach our security.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>The config of the shrewsoft client side.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:version:4<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-ike-port:500<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-mtu-size:1380<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-addr-auto:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-natt-port:4500<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-natt-rate:15<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-frag-size:540<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-dpd-enable:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-banner-enable:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:network-notify-enable:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-dns-used:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-dns-auto:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-dns-suffix-auto:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-splitdns-used:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-splitdns-auto:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-wins-used:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:client-wins-auto:1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase1-dhgroup:2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase1-life-secs:28800<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase1-life-kbytes:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:vendor-chkpt-enable:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase2-life-secs:3600<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase2-life-kbytes:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:policy-nailed:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:policy-list-auto:0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase1-keylen:128<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase2-keylen:128<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:network-host:x.x.x.114<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:client-auto-mode:push<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:client-iface:virtual<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:network-natt-mode:enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:network-frag-mode:enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:auth-method:mutual-psk-xauth<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:ident-client-type:ufqdn<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:ident-server-type:fqdn<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:ident-client-data:user@domain.yy<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:ident-server-data:aa.bb.cc<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>b:auth-mutual-psk:MmcwMEQyYmU=<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:phase1-exchange:aggressive<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:phase1-cipher:3des<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:phase1-hash:sha1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:phase2-transform:auto<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:phase2-hmac:auto<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:ipcomp-transform:disabled<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>n:phase2-pfsgroup:-1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:policy-level:auto<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>s:policy-list-include:192.168.30.0 / 255.255.255.0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>the config off the netscreen 5gt..<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>FW-Polen-> get config<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>Total Config size 10407:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset key protection enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set clock ntp<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set clock timezone 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set clock dst recurring start-weekday 3 0 3 02:00 end-weekday 3 0 10 02:00<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter trust-vr sharable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "untrust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset auto-route-export<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set alg appleichat enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset alg appleichat re-assembly enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set alg sctp enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set auth-server "Local" id 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set auth-server "Local" server-name "Local"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set auth default auth server "Local"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set auth radius accounting port 1646<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin name "support"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin password "nNx2MBrLIXzOcHAP8sJHT7CtbCGjCn"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin manager-ip x.x.0.0 255.255.0.0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin manager-ip x.x.x.x 255.255.255.224<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin auth web timeout 10<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin auth server "Local"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set admin format dos<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Trust" vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust" vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "VLAN" vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust-Tun" vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Trust" tcp-rst<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset zone "Untrust" block<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset zone "Untrust" tcp-rst<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "MGT" block<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset zone "V1-Trust" tcp-rst<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset zone "V1-Untrust" tcp-rst<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "VLAN" tcp-rst<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust" screen tear-drop<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust" screen syn-flood<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust" screen ping-death<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust" screen ip-filter-src<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "Untrust" screen land<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "V1-Untrust" screen tear-drop<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "V1-Untrust" screen syn-flood<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "V1-Untrust" screen ping-death<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "V1-Untrust" screen ip-filter-src<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set zone "V1-Untrust" screen land<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface "trust" zone "Trust"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface "untrust" zone "Untrust"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface "tunnel.1" zone "Untrust"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface vlan1 ip<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust ip 192.168.30.252/24<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust nat<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust ip x.x.x.114/30<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust route<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface tunnel.1 ip unnumbered interface untrust<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface vlan1 bypass-others-ipsec<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface vlan1 bypass-non-ip<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface vlan1 bypass-ipv6-others-ipsec<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface vlan1 bypass-icmpv6-ndp<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface vlan1 bypass-icmpv6-mld<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface vlan1 bypass-icmpv6-mrd<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface vlan1 bypass-icmpv6-msp<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface vlan1 bypass-icmpv6-snd<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust ip manageable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust ip manageable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust manage ping<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust manage ssh<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust manage web<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface untrust vip interface-ip 25 "MAIL" 192.168.1.1 manual<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust dhcp server service<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust dhcp server auto<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust dhcp server option lease 360<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set interface trust dhcp server ip 192.168.30.10 to 192.168.30.100<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset interface trust dhcp server config next-server-ip<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set flow tcp-mss 1300<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set flow path-mtu<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset flow tcp-syn-check<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset flow tcp-syn-bit-check<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set flow reverse-route clear-text prefer<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set flow reverse-route tunnel always<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set domain polen.local<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set hostname FW-Polen<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set dbuf usb filesize 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set pki authority default scep mode "auto"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set pki x509 default cert-path partial<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set dns host dns1 192.168.1.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set dns host schedule 06:28<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set address "Trust" "LAN_Local" 192.168.30.0 255.255.255.0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set address "Untrust" "192.168.255.0/24" 192.168.255.0 255.255.255.0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set address "Untrust" "Internet LAN" k.l.m.173 255.255.255.252 <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set address "Untrust" "Internet Router" k.l.m.173 255.255.255.255 <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set address "Untrust" "LAN_Remote1" 192.168.1.0 255.255.255.0 <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set address "Untrust" "LAN_Remote2" 192.168.10.0 255.255.255.0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ippool "shrew-Pool" 192.168.255.10 192.168.255.20<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Erik" uid 2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Erik" ike-id u-fqdn "user@domain.xx" share-limit 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Erik" type ike<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Erik" "enable"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Martin" uid 4<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Martin" ike-id u-fqdn "user@domain.yy" share-limit 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Martin" type ike<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Martin" "enable"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Shrew-vpn-user" uid 3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Shrew-vpn-user" ike-id u-fqdn "user@domain.yy" share-limit 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Shrew-vpn-user" type ike<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "Shrew-vpn-user" "enable"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "willem" uid 7<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "willem" type xauth<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "willem" remote ippool "shrew-Pool"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "willem" password "JC0Ja8qyNJpwmssZ11CcReMzGlnSWZz1Jg=="<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset user "willem" type auth<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user "willem" "enable"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user-group "Shrew-VPN-Users" id 3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user-group "Shrew-VPN-Users" user "Shrew-vpn-user"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user-group "VPN-Users" id 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user-group "VPN-Users" user "Erik"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set user-group "VPN-Users" user "Martin"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set crypto-policy<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote1" address k.l.m.174 Main outgoing-interface "untrust" preshare "zd/EX7JdNV+6ktsdzfC/5wmx/9nBVvDh6w==" sec-level compatible<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote1" nat-traversal<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote1" nat-traversal udp-checksum<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote1" nat-traversal keepalive-frequency 5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "GW_vpn-user" dialup "VPN-Users" Aggr local-id "GW_vpn-user" outgoing-interface "untrust" preshare "KnhedI6qNvbKv1s+8zCiscjFEjn/V6Y2DA==" proposal "pre-g2-3des-sha" "pre-g2-3des-md5"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ike gateway "GW_vpn-user" nat-traversal udp-checksum<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "GW_vpn-user" nat-traversal keepalive-frequency 5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote2" address 0.0.0.0 id "Waldheim" Aggr local-id "Polen" outgoing-interface "untrust" preshare "qy7AixgQNWCzossSZlCIaTfix8nlznNHpQ==" sec-level compatible<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ike gateway "Gateway for LAN_Remote2" nat-traversal udp-checksum<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote2" nat-traversal keepalive-frequency 5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "shrew-vpn-gateway" dialup "Shrew-VPN-Users" Aggr local-id "aa.bb.cc" outgoing-interface "untrust" preshare "aXe1Ag/hNyCAtns/3KC1vMPOumnB6zMGag==" proposal "pre-g2-3des-sha"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "shrew-vpn-gateway" dpd-liveness interval 30<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ike gateway "shrew-vpn-gateway" nat-traversal udp-checksum<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "shrew-vpn-gateway" nat-traversal keepalive-frequency 20<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "shrew-vpn-gateway" xauth server "Local"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ike gateway "shrew-vpn-gateway" xauth do-edipi-auth<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike respond-bad-spi 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote1" heartbeat hello 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote1" heartbeat reconnect 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote2" heartbeat hello 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike gateway "Gateway for LAN_Remote2" heartbeat reconnect 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ike ikev2 ike-sa-soft-lifetime 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ike ikeid-enumeration<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ike dos-protection<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ipsec access-session enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ipsec access-session maximum 5000<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ipsec access-session upper-threshold 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ipsec access-session lower-threshold 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ipsec access-session dead-p2-sa-timeout 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ipsec access-session log-error<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ipsec access-session info-exch-connected<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset ipsec access-session use-error-log<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set xauth default dns1 192.168.30.101<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set xauth default dns2 192.168.30.101<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set xauth default wins1 192.168.30.101<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set xauth default wins2 192.168.30.101<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Tunnel for LAN_Remote1" gateway "Gateway for LAN_Remote1" no-replay tunnel idletime 0 sec-level compatible<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Tunnel for LAN_Remote1" monitor<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "tunnel-vpn-user" gateway "GW_vpn-user" replay tunnel idletime 0 proposal "nopfs-esp-3des-sha" "nopfs-esp-3des-md5"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "tunnel-vpn-user" monitor<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Tunnel for LAN_Remote2" gateway "Gateway for LAN_Remote2" no-replay tunnel idletime 0 proposal "g2-esp-3des-sha" "g2-esp-3des-md5" "g2-esp-des-sha" "g2-esp-des-md5"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Tunnel for LAN_Remote2" monitor<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Shrew-Vpn-Tunnel" gateway "shrew-vpn-gateway" no-replay tunnel idletime 0 proposal "g2-esp-3des-sha"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Shrew-Vpn-Tunnel" monitor<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Shrew-Vpn-Tunnel" id 0xc bind interface tunnel.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "untrust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set l2tp "WindowsVPN-l2tp" id 1 outgoing-interface untrust keepalive 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set url protocol websense<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vpn "Shrew-Vpn-Tunnel" proxy-id local-ip 192.168.30.0/24 remote-ip 255.255.255.255/32 "ANY"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 6 from "Untrust" to "Trust" "Any-IPv4" "VIP(untrust)" "MAIL" permit log count<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 6 application "SMTP"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 6<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set log session-init<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 1 from "Untrust" to "Trust" "LAN_Remote1" "LAN_Local" "ANY" tunnel vpn "Tunnel for LAN_Remote1" id 0x5 pair-policy 5 log count traffic mbw 1024<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set log session-init<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 8 name "LAN_Remote2" from "Untrust" to "Trust" "LAN_Remote2" "LAN_Local" "ANY" tunnel vpn "Tunnel for LAN_Remote2" id 0x8 pair-policy 9 log count traffic mbw 1024<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 8<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 5 from "Trust" to "Untrust" "LAN_Local" "LAN_Remote1" "ANY" tunnel vpn "Tunnel for LAN_Remote1" id 0x5 pair-policy 1 log count traffic mbw 1024<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set log session-init<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 9 name "LAN_Remote2" from "Trust" to "Untrust" "LAN_Local" "LAN_Remote2" "ANY" tunnel vpn "Tunnel for LAN_Remote2" id 0x8 pair-policy 8 log count traffic mbw 1024<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 9<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 0 from "Trust" to "Untrust" "Any-IPv4" "Any-IPv4" "ANY" permit log count<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 4 name "vpn-user" from "Untrust" to "Trust" "Dial-Up VPN IPv4" "LAN_Local" "ANY" tunnel vpn "tunnel-vpn-user" id 0x6 pair-policy 7 log count<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 4<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set log session-init<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 7 name "vpn-user" from "Trust" to "Untrust" "LAN_Local" "Dial-Up VPN IPv4" "ANY" tunnel vpn "tunnel-vpn-user" id 0x6 pair-policy 4 log count<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 7<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set log session-init<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 10 from "Untrust" to "Trust" "192.168.255.0/24" "LAN_Local" "ANY" permit log<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set policy id 10<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set log session-init<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set nsmgmt bulkcli reboot-timeout 60<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ssh version v2<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ssh enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set config lock timeout 5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset license-key auto-update<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set telnet client enable<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ntp server "46.19.33.5"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ntp server backup1 "81.171.44.131"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set ntp server backup2 "0.0.0.0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set modem speed 115200<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set modem retry 3<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set modem interval 10<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set modem idle-time 10<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set snmp name "zetten"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set snmp port listen 161<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set snmp port trap 162<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "untrust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>unset add-default-route<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set route 0.0.0.0/0 interface untrust gateway x.x.x.113<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set route 192.168.255.0/24 interface tunnel.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "untrust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>set vrouter "trust-vr"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>exit<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>FW-Polen-><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";mso-fareast-language:NL'>Met vriendelijke groet, kind Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";mso-fareast-language:NL'>Willem Kutschruiter<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";mso-fareast-language:NL'>+31653229596<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>