Hi all,
I'm new to this VPN setup stuff and I'm trying to learn all I can as Iset this up for a non-profit I'm working with.
I've been beating my head all day on this and I still can't seem to get the SSH VN client to connect to the VPN router. I went through the setup tutorial at
The client is configured as described in the tutorial and the router as well. Both have the correct configuration re: the lan at the router end (local group on router = 192.168.2.0 subnet 255.255.255.0) and on the client end (remote network = 192.168.2.0 subnet 255.255.255.0)
The SSH IKE Log shows the following:
0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Start isakmp sa negotiation 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Version = 1.0, Input packet fields = 0000 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Encode packet, version = 1.0, flags = 0x00000000 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Retransmitting packet, retries = 5 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Retransmitting packet, retries = 4 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Retransmitting packet, retries = 3 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Retransmitting packet, retries = 2 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Retransmitting packet, retries = 1 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Removing negotiation 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Connection timed out or error, calling callback Phase-1 [initiator] between ipv4(udp:500,[0..3]=192.168.3.54) and ipv4(udp:500,[0..3]=xxx.xxx.xxx.xxx) failed; Timeout. 0.0.0.0:500 (Initiator) xxx.xxx.xxx.xxx:500 { ec9b231c a3000001 - 00000000 00000000 [-1] / 0x00000000 } Aggr; Deleting negotiationAnd the system log at the router end shows the following: May 23 09:41:20 2005 VPN Log Ignoring Vendor ID payload Type = [SSH Communications Security IPSEC Express version 4.1.0] May 23 09:41:20 2005 VPN Log Ignoring Vendor ID payload Type = [draft-stenberg-ipsec-nat-traversal-01] May 23 09:41:20 2005 VPN Log Ignoring Vendor ID payload Type = [draft-stenberg-ipsec-nat-traversal-02] May 23 09:41:20 2005 VPN Log Ignoring Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-00] May 23 09:41:20 2005 VPN Log [Tunnel Negotiation Info]