VPN setup question for XP.
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
||||||||||||||||||||||||||||||||||
|
Posted by Freewheeling on August 21, 2006, 1:18 pm
Please log in for more thread options I'm attempting to set up a VPN for about 6 remote users connected through a Netgear FVS318. I've set up the VPN filters according to the information on this Netgear Support Page (using www.tinyurl.com, so it doesn't wrap): http://tinyurl.com/oyh36 , but I'm not sure how to use the filters set up as part of a completed VPN connection. It appears they've left that critical part out of the directions. (I do have a router on my end. It's a Belkin N1. The WAN set on the Belking isn't the internet IP though. It's something that starts with 192.168 so it's local, and the connection uses a Windows gateway. Maybe that's complicating things.) Clearly I can't use the VPN wizard to do it, because I've tried that, so there must me some manual rigmarole. The filters assume static addresses, and I generally have dynamic, but wanted to at least see if I can establish a network before dealing with that nicety. The IP addresses don't change, whether they're local or wide. BTW, I have set up a succussful Remote Desktop connection passing through this router, so it is possible to set up a two-way connection. The following log file is the sequence the router runs through about half a dozen times before giving up on the VPN, when I attempt to use a generic VPN connection set up by Microsoft's wizard. (Yes, I did specify an IPSec shared key). It basically gets stuck to the Oakley Transform, though I don't know what "invalid value 14" means. -----start log here----- Sat, 08/19/2006 13:07:32 - FVS318 IPsec:Receive Packet address:0x1397554 from ***.***.***.*** Sat, 08/19/2006 13:07:32 - FVS318 IKE:Peer Initialized IKE Main Mode Sat, 08/19/2006 13:07:32 - FVS318 IKE:[VPNCON2] RX << MM_I1 : ***.***.***.*** Sat, 08/19/2006 13:07:32 - FVS318 IPsec:New State index:0, sno:13 Sat, 08/19/2006 13:07:32 - FVS318 IPsec:responding to Main Mode Sat, 08/19/2006 13:07:32 - FVS318 IPsec:loglog[3] invalid value 14 for attribute OAKLEY_GROUP_DESCRIPTION in Oakley Transform -----end log here----- So is there any way to set up a VPN going from an XP box to this router? Do I need proprietary software? Would ISA work? | ||||||||||||||||||||||||||||||||||
|
Posted by heycarnut on August 22, 2006, 9:24 am
Please log in for more thread options I'll assume XP throughout. Do you mean the FVS318 configured as the VPN device, talking to your local network using XP vpn server capabilities locally, or are you just using the FVS318 as a router/firewall for this connection, and using the built-in vpn capabilities of XP as client and server on each side? The former may not work, the latter certainly will. In any case... You have setup a target box on the lan for VPN, yes? This will be needed, since you're not running another FVS318 or equivalent on your end (in that case, they could just 'talk' directly to each other by setting up the apporopriate VPN parameters.) If not, go to network connections on the target, select the 'create a new connection' task, next;setup advanced...;accept incoming...;allow vpn...;edit users as needed;edit networking s/w if needed; finish You should now have an 'incoming connections' icon in your network connections. You'll need to set the router on your end to send vpn traffic to the target. Not sure if the g/w system will get in the way, I've never used vpn on xp that way - is there a reason you don't just connect the router directly to the ISP modem? Both sides need to be using the same vpn method, e.g., ppp, l2tp... Since manufacturers interpret the VPN specs differently in some cases, this may not fly if you're trying to let the FVS318 act as the client, ymmv. Good luck R | ||||||||||||||||||||||||||||||||||
|
Posted by heycarnut on August 22, 2006, 9:49 am
Please log in for more thread options
heycarnut wrote: <... Please also note, the XP vpn capabilities only allow one connection to the target at a time. If you need simultaneous connections, you'll need to use some other VPN server. Or, just put another FSV318 on your side. R | ||||||||||||||||||||||||||||||||||
|
Posted by Freewheeling on August 25, 2006, 9:45 pm
Please log in for more thread options heycarnut wrote:
> heycarnut wrote:
I think the FSV318 can handle up to 8 simultaneous connections, which is
> <... > Please also note, the XP vpn capabilities only allow one connection to > the target at a time. If you need simultaneous connections, you'll need > to use some other VPN server. > Or, just put another FSV318 on your side. > > R > enough for our small staff. On the other side I can't imagine that they'll need more than 1 connection per employee. | ||||||||||||||||||||||||||||||||||
|
Posted by heycarnut on August 26, 2006, 3:28 am
Please log in for more thread options windows xp(192.168.1.5)-----(192.168.1.2)Windows Server 2003
RRAS----Sprint DSL Modem/Router VPN server configured to allow IPSec over TCP with NAT/PAT/NAT-T. Client transparent tunnelling IPSec over TCP. Connected to VPN server with split tunneling. ping, tracert and ssh traffic to corporate is successful. But no web traffic(http, https, imap/ssl) to corporate traffic. There is no service filtering on VPN concentrator. Windows xp is not using any proxy server. Windows server 2003 is told by sysadm as passing all traffic. Any suggestion on what can go wrong? | ||||||||||||||||||||||||||||||||||
| Similar Threads | Posted |
| VPN setup question for XP. | August 21, 2006, 1:18 pm |
| Simple netmask question, could some one please answer this question for me. | October 11, 2007, 10:22 pm |
| NAT-T question. | April 13, 2005, 12:02 am |
| VPN question | October 20, 2005, 4:16 pm |
| How To VPN Question | August 29, 2006, 9:52 pm |
| VPN Proposals question | May 2, 2005, 5:27 pm |
| An ode to OpenVPN, and a question | September 17, 2005, 10:06 pm |
| A basic question about VPN ... | September 30, 2006, 5:19 pm |
| L2TP question | February 13, 2008, 2:23 pm |
| VPN setup - is there a standard way to do this? | April 5, 2005, 1:26 am |
| VPN setup at home | September 15, 2005, 11:50 pm |
| VPN Tunneller setup | March 31, 2006, 1:24 am |
| Netscreen 5xp Setup Help | November 24, 2006, 11:39 pm |
| Nortel ssl vpn setup | April 30, 2007, 12:04 pm |
| Basic VPN setup | March 5, 2008, 3:31 pm |
>
> I'm attempting to set up a VPN for about 6 remote users connected
> through a Netgear FVS318.